CVE-2026-23657Patch(microsoft / 365_apps)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch microsoft 365_apps systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23657

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

365_apps
office_long_term_servicing_channel

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 4 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-04-14); latest day: 2
4 total mentions across 2 days

Affected systems

Vendors

microsoft

Products

365_appsoffice_long_term_servicing_channel

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 2d

Signal classification3 categories

Patch

250.0%

Disclosure

125.0%

General

125.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-14	2	Patch2
2026-04-15	2	Disclosure1General1

Full discourse4 posts

Haifei Li@HaifeiLi177d
Patch
Today (Patch Tuesday) Microsoft patched three new Office bugs I recently discovered and reported: - Microsoft Word Remote Code Execution Vulnerability (CVE-2026-33095) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33095 - Microsoft Excel Remote Code Execution Vulnerability (CVE-2026-32199) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32199 - Microsoft Word Remote Code Execution Vulnerability (CVE-2026-23657) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23657 More to come.:)
Post summary
Microsoft released security updates for three Office Remote Code Execution bugs (CVE-2026-33095, CVE-2026-32199, CVE-2026-23657) after the author’s discovery, with no PoC or exploit details, but explicit patch information is provided.
014088158.3K
8.9K followersView on X
Infoflowcloud@infoflowcloud176d
Disclosure
🚨*CVE* CVE-2026-23657 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. https://www.cve.org/CVERecord?id=CVE-2026-23657 ----- Traducción: CVE-2026-23657 Uso posterior libre en Microsoft Office Word permite a un atacante no autor… http://infoflow.cloud`
Post summary
The post announces CVE-2026-23657, a use‑after‑free vulnerability in Microsoft Office Word that permits local code execution. No PoC, exploit code, patch, or active exploitation details are provided.
0000035
71 followersView on X
CVE@CVEnew176d
General
CVE-2026-23657 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. https://www.cve.org/CVERecord?id=CVE-2026-23657
Post summary
The snippet references CVE-2026-23657 as a use‑after‑free flaw in Microsoft Office Word that could enable local code execution, but it offers no PoC, exploit details, patch information, or evidence of active exploitation.
00000287
57.2K followersView on X
Red Hornet Intel@RedHornet_Intel177d
Patch
CVE-2026-23657 | Microsoft 365 Apps for Enterprise | Remote Code Execution Description A use-after-free vulnerability in Microsoft Office Word in Microsoft 365 Apps for Enterprise allows an unauth attacker to achieve local RCE by tricking a user into opening a malicious document that triggers memory corruption during processing. Severity: High Exploitation: Unknown Public PoC: Unknown Patch Available: Yes Affected Product: Microsoft 365 Apps for Enterprise Affected Version: >= 16.0.1 and < https://aka.ms/OfficeSecurityReleases Sources Vendor: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23657
Post summary
Microsoft’s security advisory discloses a use‑after‑free RCE in Microsoft 365 Apps for Enterprise and confirms patch availability; no public PoC or active exploitation noted.
0000046
8 followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	365_apps	-	-	x64
App	microsoft	365_apps	-	-	x86
App	microsoft	office_long_term_servicing_channel	2024	-	x64
App	microsoft	office_long_term_servicing_channel	2024	-	x86

Explore more

Back to dashboard microsoft CVEs 365_apps vulnerabilities

What researchers are saying

CVE-2026-23657

Red Hornet Intel[verified]@RedHornet_IntelPatch

Microsoft’s security advisory discloses a use‑after‑free RCE in Microsoft 365 Apps for Enterprise and confirms patch availability; no public PoC or active exploitation noted.

Haifei Li@HaifeiLiPatch

Microsoft released security updates for three Office Remote Code Execution bugs (CVE-2026-33095, CVE-2026-32199, CVE-2026-23657) after the author’s discovery, with no PoC or exploit details, but explicit patch information is provided.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE-2026-23657, a use‑after‑free vulnerability in Microsoft Office Word that permits local code execution. No PoC, exploit code, patch, or active exploitation details are provided.

CVE@CVEnewGeneral

The snippet references CVE-2026-23657 as a use‑after‑free flaw in Microsoft Office Word that could enable local code execution, but it offers no PoC, exploit details, patch information, or evidence of active exploitation.