vulnti.work

Microsoft Office Security Feature Bypass Vulnerability

High Listed in CISA KEV
CVECVE-2026-21509
First seen2026-01-26 00:00 UTC
Disclosed2026-01-26 00:00 UTC
Last updated2026-07-14 20:00 UTC
Channel statuspending_review

Summary

Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attacker to bypass a security feature locally. Some of the impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • Microsoft:Office

Sources

  • CISA KEV DATABASE

Original Links

Timeline

  1. kev_added CISA KEV
  2. kev_ingest CISA KEV