[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frWI0GQKoSVCsA7gZnBBDUAXXZ2LCOQs22On7AEvm2Xg":3},{"article":4,"iocs":37,"watch_terms":38,"solutions":39,"lesson":133},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"82d6f429-2895-426e-859a-ff0911de588c","Microsoft Patches Two Dozen RCE Flaws in Office","microsoft-patches-two-dozen-rce-flaws-in-office-0deebb","In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office. The post Microsoft Patches Two Dozen RCE Flaws in Office appeared first on SecurityWeek.","Microsoft has released emergency patches for over 30 vulnerabilities, with a significant focus on its Office suite. Two dozen of these are high-severity remote code execution (RCE) flaws, many of which could be exploited through the Preview Pane by sending specially crafted malicious documents. While most RCEs stem from buffer overflow issues, Microsoft also addressed information disclosure and security bypass bugs within Office, as well as separate vulnerabilities in ASP.NET Core, Identity Web, and MSAL for Node.js. Importantly, Microsoft stated that none of these newly patched vulnerabilities have been exploited in the wild as zero-days.","Microsoft releases patches for over 30 vulnerabilities, including two dozen RCE flaws in Office.","https:\u002F\u002Fwww.securityweek.com\u002Fmicrosoft-patches-two-dozen-rce-flaws-in-office\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F01\u002FMicrosoft-Office-apps.jpeg","2026-10-16T07:55:06+00:00","2026-10-16T08:00:14.275701+00:00",8,[17,20,23,25,27],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":22},"Office","product",{"name":24,"type":22},"ASP.NET Core",{"name":26,"type":22},"Identity Web",{"name":28,"type":22},"MSAL for Node.js","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},[],[18,24,26],{"controls":40,"vendors":127},[41,69,98],{"slug":42,"name":43,"problem":44,"products":45},"patch-management","Automated patch management","Known holes get closed in days, not months.",[46,54,62],{"vendor_slug":47,"vendor_name":48,"vendor_logo":49,"product_slug":50,"product_name":51,"url":52,"description":53},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":42,"product_name":66,"url":67,"description":68},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":70,"name":71,"problem":72,"products":73},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[74,82,90],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":99,"name":100,"problem":101,"products":102},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[103,111,119],{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-email","Darktrace \u002F EMAIL","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Femail","Email security that flags messages deviating from normal communication patterns.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",[128],{"slug":129,"name":18,"logo_path":130,"roles":131},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png",[132],"affected",{"slug":134,"title":135,"body":136,"framework_refs":137,"framework_notes":146},"microsoft-patches-24-rce-flaws-in-office-suite","Microsoft Patches 24 RCE Flaws in Office Suite","Microsoft released emergency patches addressing over 30 vulnerabilities, including two dozen high-severity remote code execution flaws in its Office suite, many exploitable simply through the Preview Pane without requiring the user to open a malicious document. The root cause of most RCEs is buffer overflow weaknesses, a well-understood and preventable class of vulnerability. This matters because Office is ubiquitous across enterprises, making unpatched systems an extremely broad and attractive attack surface. Although none of these flaws were exploited as zero-days at the time of disclosure, the window between patch release and deployment is a critical period of elevated risk. Organizations that delay patching or lack visibility into their software inventory are most exposed during this window.",[138,139,140,141,142,143,144,145],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","ITIL: Change and Release Management","MITRE ATT&CK T1566.001: Spearphishing Attachment","MITRE ATT&CK T1203: Exploitation for Client Execution",{}]