Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 3 products
| Date | Total | Labels |
|---|
| 2026-04-14 | 1 | Patch1 |
| 2026-04-15 | 2 | General2 |
| 2026-04-19 | 1 | Disclosure1 |
https://whatsapp.com/channel/0029VbAre6eKQuJNLsryuQ0u/112 🔴 Zero-Day CVE-2026-32201 – SharePoint Spoofing CVE-2026-33825 – Publicly Disclosed 🔴 Critical: CVE-2026-33827 – Windows RCE CVE-2026-33826 – Active Directory RCE CVE-2026-32157 – RDP Client RCE CVE-2026-32190 – Microsoft Office RCE #cyber
Post summary
The message lists several CVEs with brief descriptors but lacks details about PoC, exploitation, or patches.
CVE-2026-32190: Microsoft Office Remote Code Execution Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04cDZ_C0
Post summary
The headline announces a CVE-2026-32190 remote code execution flaw in Microsoft Office and points readers toward business implications and response guidance.
CVE-2026-32190 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. https://www.cve.org/CVERecord?id=CVE-2026-32190
Post summary
The text reports a use‑after‑free vulnerability (CVE‑2026‑32190) that permits local code execution, but provides no PoC, exploit, or mitigation details.
CVE-2026-32190 | Microsoft 365 Apps for Enterprise | Remote Code Execution Description Use-after-free vulnerability in Microsoft Office allows unauth attacker to achieve local RCE by tricking a user into opening a malicious document that triggers memory corruption during processing. Severity: High Exploitation: Unknown Public PoC: Unknown Patch Available: Yes Affected Product: Microsoft 365 Apps for Enterprise Affected Version: >= 16.0.1 and < https://aka.ms/OfficeSecurityReleases Sources Vendor: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32190
Post summary
Microsoft Office Use‑After‑Free CVE-2026-32190 enables local RCE for unauthenticated users; a patch has been released.
12 of 12 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_apps | - | - | x64 |
| App | microsoft | 365_apps | - | - | x86 |
| App | microsoft | office | 2016 | - | x64 |
| App | microsoft | office | 2016 | - | x86 |
| App | microsoft | office | 2019 | - | x64 |
| App | microsoft | office | 2019 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | macos | - |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2024 | macos | - |