CVE-2026-81952

This vulnerability is a bug in Microsoft Word that can be triggered by opening a specially created document. If someone sends you a malicious Word file, the flaw can let that file cause Word to run code on the device. Think of it like a “crash-proof” door that can be forced open with the right key—only here the “key” is a crafted document.

This matters if you use any of the following in your business: Microsoft 365 Apps, Microsoft Office, Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft 365, Office 2016, Office 2019, Office 2021, or Office 2024. The risk is tied to document opening, meaning an attacker needs a user to open a crafted file. Based on the provided findings, there is no confirmed exploitation in the wild for this specific CVE, but it still becomes a real risk when a malicious document is reachable to staff via email or other file sharing.

This should be treated as urgent because the flaw is a remote code execution issue in Microsoft Word, meaning a malicious document can directly lead to code running on a user’s device. Even though the provided findings do not show confirmed exploitation for CVE-2026-81952, it remains high-impact software used widely in small businesses, and patch guidance is available.