CVE-2026-63515

This vulnerability is in Microsoft Office and can be triggered by a specially crafted document. If someone opens that document, Office may crash or—worse—allow an attacker to run code on the computer. Think of it like a flaw in how Office reads part of a file: a malicious file can “trick” Office into executing something it should not.

This matters to you if you use or manage Microsoft Office on employee computers—especially if you open email attachments, shared documents, or files from the internet. It applies across multiple Office offerings, including microsoft 365 apps and several office versions for Windows and for Mac.

This is only a risk if an attacker can deliver a crafted Office document to a user who then opens it in the affected Office version.

This should be treated as RED priority because press attention is linked to this Office security update and a serious threat actor (Lazarus group) has been associated in coverage. Even though no public exploit code is on record and it is not listed in CISA KEV, the impact (code execution in Office) is high.

Act now by updating all affected Office installs, since the safest path is to remove the vulnerable build.