VulnSocial

CVE-2026-55032Patch(microsoft / 365_apps)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft 365_apps systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

microsoft CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 365_apps
  • microsoft_365
  • office_2019
  • office_2021

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-07-15); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
microsoft
Products
365_appsmicrosoft_365office_2019office_2021office_2024sharepoint_serverword

3 versions affected across 7 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-15: 1Mentions · 2026-07-22: 1Patch / Workaround · 2026-07-15: 1Patch / Workaround · 2026-07-22: 1Technical Details · 2026-07-15: 1Technical Details · 2026-07-22: 107-1507-22
Signal classification1 categories
Patch
2100.0%
Referenced assets4 URLs
Full discourse2 posts
  • Haifei Li@HaifeiLi
    Patch

    Cyber update after World Cup.:) Last week on July Patch Tuesday two of my Office bugs got patched: - Microsoft Word Remote Code Execution Vulnerability (CVE-2026-55032) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55032 - Microsoft Excel Remote Code Execution Vulnerability (CVE-2026-47642) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47642 And happy to be recognized by @msftsecresponse again as an MVR this year (https://www.microsoft.com/en-us/msrc/blog/2026/07/congratulations-to-the-msrc-2026-most-valuable-security-researchers1), along with many super talented researchers.:)

    Post summary

    The message announces that Microsoft has patched two Office Remote Code Execution vulnerabilities (CVE-2026-55032 and CVE-2026-47642) on Patch Tuesday, linking to the MSRC update guide and highlighting researcher recognition.

    1103152.5K
    8.9K followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 Microsoft’s Word fix comes with a side quest: install every applicable July package, not just the one that looks important. Patch Tuesday: now with homework and remote-code execution stakes. https://windowsforum.com/threads/cve-2026-55032-install-all-july-updates-for-word-and-sharepoint.438699/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftWord #OfficeUpdates #SharepointSecurity #Cve202655… https://t.co/fXIAUFv5jN

    Post summary

    The tweet stresses applying all July updates for Word and SharePoint to mitigate a remote‑code execution vulnerability (CVE‑2026‑55032).

    0000012
    1.2K followersView on X
CPE platform detail16 entries

16 of 16 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoft365_apps--x64
Appmicrosoft365_apps--x86
Appmicrosoftmicrosoft_365-macos-
Appmicrosoftoffice_2019--x64
Appmicrosoftoffice_2019--x86
Appmicrosoftoffice_2021--x64
Appmicrosoftoffice_2021--x86
Appmicrosoftoffice_2021-macos-
Appmicrosoftoffice_2024--x64
Appmicrosoftoffice_2024--x86
Appmicrosoftoffice_2024-macos-
Appmicrosoftsharepoint_server---
Appmicrosoftsharepoint_server2016--
Appmicrosoftsharepoint_server2019--
Appmicrosoftword2016-x64
Appmicrosoftword2016-x86

Explore more

Back to dashboardmicrosoft CVEs365_apps vulnerabilities