Microsoft Releases Emergency Fix for Exploited Office Zero-Day
ID: dc4fa497-f1e9-5d2e-ab9c-f8ef66bc98ac
STIX ID: report--dc4fa497-f1e9-5d2e-ab9c-f8ef66bc98ac
Feed Name: The Cyber Express
Threat Score
Microsoft released an emergency fix and mitigations for an actively exploited Microsoft Office zero-day (CVE-2026-21509) that bypasses OLE/COM mitigations; Office 2021+ receives a service-side protection (restart required) while Office 2016/2019 users must apply registry workarounds until security updates are released. The vulnerability is rated 7.8 and requires user interaction via malicious Office files.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.