CVE-2026-21509

Microsoft Office Security Feature Bypass Vulnerability

365 Apps

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

26. Jan 2026

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509
• Hinweis
  https://www.vicarius.io/vsociety/posts/cve-2026-21509-detection-script-microsoft-office-security-feature-bypass-vulnerability
• Hinweis
  https://www.vicarius.io/vsociety/posts/cve-2026-21509-mitigation-script-microsoft-office-security-feature-bypass-vulnerability
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21509
• CISA
  Microsoft Office Security Feature Bypass Vulnerability
• NVD
  CVE-2026-21509