CVE-2026-47635Disclosure(microsoft / office_2024)

LOWCVSS 8.4 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch microsoft office_2024 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47635

Weakness type (CWE)

CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

office_2024

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 4 signals
Disclosure: 2 classified signals
Peaked 1d ago at 2 mentions (2026-06-12); latest day: 2
4 total mentions across 2 days

Affected systems

Vendors

microsoft

Products

office_2024

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

250.0%

Patch

250.0%

Referenced assets4 URLs

By indicator

Full discourse4 posts

Cyber Edition@CyberEdition136d
Patch
⚠️ Microsoft patched 3 critical Outlook and Word RCE flaws (CVE-2026-45456, CVE-2026-45458, CVE-2026-47635). Even Outlook’s Preview Pane can trigger exploitation without opening an attachment. Organizations should patch immediately. #Microsoft https://thecyberedition.com/critical-microsoft-outlook-word-rce-flaws-patch-now/
Post summary
Microsoft has released patches for three critical Outlook and Word RCE vulnerabilities; organizations are advised to apply the updates immediately.
0001086
736 followersView on X
ThreatAft@ThreatAft136d
Disclosure
🔐 CRITICAL: Outlook & Word RCE zero‑days Preview Pane = attack vector. No click required. Just previewing an email triggers code execution. CVE-2026-47635, CVE-2026-45458, CVE-2026-45456 — CVSS 8.4 🔗 https://threataft.com/articles/outlook-word-preview-pane-rce-cve-2026-47635-45458 #CyberSecurity #ThreatIntel #infosec #PatchTuesday
Post summary
Announcement of three critical Outlook & Word RCE zero‑days (CVE‑2026‑47635, −45458, −45456) where merely previewing an email triggers code execution, but no PoC, exploit details, active exploitation, or patch information is provided.
0000156
29 followersView on X
The Daily Tech Feed@dailytechonx137d
Patch
Microsoft has patched critical RCE vulnerabilities in Outlook and Word, identified as CVE-2026-45456, CVE-2026-45458, and CVE-2026-47635. These flaws could allow attackers to execute arbitrary code via specially crafted emails. Users should update their Office installations immediately to mitigate potential risks. #Microsoft #Outlook #Word #RCE #CyberSecurity #Vulnerabilities https://thedailytechfeed.com/critical-vulnerabilities-in-microsoft-outlook-and-word-allow-remote-code-execution/
Post summary
Microsoft has released patches for critical RCE vulnerabilities in Outlook and Word; users are advised to update their Office installations immediately to mitigate the risk of code execution via crafted emails.
0000040
389 followersView on X
ThreatCluster@threatcluster137d
Disclosure
Microsoft disclosed three high-severity remote code execution bugs in Outlook and Word, CVE-2026-45456, CVE-2026-45458 and CVE-2026-47635, each rated CVSS 8.4, in a 9 June security advisory, Microsoft said. https://threatcluster.io/cluster/critical-rce-vulnerabilities-found-in-microsoft-outlook-and--0ac29809
Post summary
Microsoft has disclosed three high‑severity remote code execution vulnerabilities in Outlook and Word, each rated CVSS 8.4.
0000055
330 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	office_2024	-	-	x64
App	microsoft	office_2024	-	-	x86

Explore more

Back to dashboard microsoft CVEs office_2024 vulnerabilities

What researchers are saying

CVE-2026-47635

Cyber Edition[verified]@CyberEditionPatch

Microsoft has released patches for three critical Outlook and Word RCE vulnerabilities; organizations are advised to apply the updates immediately.

The Daily Tech Feed[verified]@dailytechonxPatch

Microsoft has released patches for critical RCE vulnerabilities in Outlook and Word; users are advised to update their Office installations immediately to mitigate the risk of code execution via crafted emails.

ThreatCluster[verified]@threatclusterDisclosure

Microsoft has disclosed three high‑severity remote code execution vulnerabilities in Outlook and Word, each rated CVSS 8.4.

ThreatAft@ThreatAftDisclosure

Announcement of three critical Outlook & Word RCE zero‑days (CVE‑2026‑47635, −45458, −45456) where merely previewing an email triggers code execution, but no PoC, exploit details, active exploitation, or patch information is provided.