Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 6 products
📝 Another Word file can turn “please review” into remote code execution. Microsoft says exploitation is less likely, but patching beats discovering your document has a malicious second career. https://windowsforum.com/news/cve-2026-77901-microsoft-office-word-remote-code-execution-vulnerability.445296/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #Msrc #Cve202677901 https://t.co/AacXEsiaJ7
13 of 13 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_apps | - | - | x64 |
| App | microsoft | 365_apps | - | - | x86 |
| App | microsoft | microsoft_365 | - | macos | - |
| App | microsoft | office_2019 | - | - | x64 |
| App | microsoft | office_2019 | - | - | x86 |
| App | microsoft | office_2021 | - | - | x64 |
| App | microsoft | office_2021 | - | - | x86 |
| App | microsoft | office_2021 | - | macos | - |
| App | microsoft | office_2024 | - | - | x64 |
| App | microsoft | office_2024 | - | - | x86 |
| App | microsoft | office_2024 | - | macos | - |
| App | microsoft | word | 2016 | - | x64 |
| App | microsoft | word | 2016 | - | x86 |