Security Alert (A26-09-39): Vulnerability in Microsoft Products

Description:

Microsoft has released a security update to address a vulnerability in several Microsoft products or components. A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerability.

Affected Systems:

• Microsoft 365 Apps for Enterprise
• Microsoft Office LTSC 2021, LTSC 2024

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

Impact:

Successful exploitation of the vulnerability could lead to remote code execution on an affected system.

Recommendation:

Patches for affected products are available from the Windows Update / Microsoft Update Catalog. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
• https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70125