Microsoft Outlook and Word Vulnerabilities Allow Attackers to Execute Malicious Code

Cybersecuritynews •Abinaya • June 12, 2026

Microsoft released critical fixes for three closely related remote code execution (RCE) vulnerabilities in Microsoft Outlook and Word that stem from low‑level memory‑safety flaws in the Word rendering engine and its integration with Outlook Classic. These bugs, tracked as CVE‑2026‑45456, CVE‑2026‑45458, and CVE‑2026‑47635, are rated Critical with a CVSS v3.1 base score of 8.4, reflecting […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerabilities Found in Microsoft Outlook and Word Microsoft has disclosed three critical remote code execution (RCE) vulnerabilities in Outlook and Word, identified as CVE-2026-45456, CVE-2026-45458, and CVE-2026-47635. These vulnerabilities, published on June 9, 2026, are linked to low-level memory safety issues in the Word rendering engine and its integration with Outlook Classic. Attackers could exploit these flaws to execute arbitrary code on targeted systems, affecting users of both applications. The vulnerabilities have a CVSS v3.1 base score of 8.4, indicating a high severity level. Microsoft has released patches to address these vulnerabilities, and users are urged to update their software immediately to mitigate potential risks. Security researchers are monitoring the situation for any signs of active exploitation. 2 sources 72

Extracted Entities

Microsoft Outlook and Word Vulnerabilities Allow Attackers to Execute Malicious Code

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (1)