CVE Catalog
CVE-2026-65656
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.36%
29th percentile - higher than 29% of all known CVEs
Summary
Improper neutralization of special elements used in a command (command injection) in Microsoft Office allows an unauthorized attacker to execute code locally.
Risk Assessment
An attacker can execute arbitrary code on the victim's machine, potentially leading to system compromise or data theft.
Recommendation
Apply security updates provided by Microsoft for Office.
Original NVD description (English source)
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.