---
id: "CVE-2026-113759"
page: "https://infrastack.ai/live/CVE-2026-113759"
kind: "vulnerability"
aliases: ["CVE-2026-113759"]
title: "Microsoft Office Word: use-after-free lets a local attacker run code"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "Microsoft Office Word", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "Microsoft Office LTSC 2021", "fixed": ["16.0.14334.21048"], "affected": ">= 16.0.1, < 16.0.14334.21048", "ecosystem": "vendor"}, {"name": "Microsoft Office LTSC 2024", "fixed": ["16.0.17932.21140"], "affected": ">= 16.0.0, < 16.0.17932.21140", "ecosystem": "vendor"}, {"name": "Microsoft 365 Apps for Enterprise", "fixed": ["2610 build 20527.20196 (Current Channel)"], "affected": ">= 16.0.1, before the Nov 10 2026 builds", "ecosystem": "vendor"}, {"name": "Microsoft Office for Mac (365, LTSC 2021, LTSC 2024)", "fixed": ["16.115.26110837"], "affected": "< 16.115.26110837", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["macos", "microsoft-365", "microsoft-office", "package", "user-interaction", "windows", "word"]
not_affected_if: ["patched-nov-2026-build", "unknown"]
published_at: "2026-11-10T19:18:54+00:00"
first_seen_at: "2026-11-10T19:24:38+00:00"
updated_at: "2026-11-10T23:56:34+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113759", "first_seen_at": "2026-11-10T19:24:38+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/cve-2026-113759", "first_seen_at": "2026-11-10T23:56:34+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/cve-2026-113759", "https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"]}]
exploit_sources: []
---

# Microsoft Office Word: use-after-free lets a local attacker run code

Link for people: https://infrastack.ai/live/CVE-2026-113759 (this .md is for agents)

Microsoft Word mishandles memory after it is freed, a use-after-free bug. A local attacker with no account can use it to execute code on the machine running Word.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Office Word affected range not listed fixed no fixed version listed
- vendor:Microsoft Office LTSC 2021 affected >= 16.0.1, < 16.0.14334.21048 fixed 16.0.14334.21048
- vendor:Microsoft Office LTSC 2024 affected >= 16.0.0, < 16.0.17932.21140 fixed 16.0.17932.21140
- vendor:Microsoft 365 Apps for Enterprise affected >= 16.0.1, before the Nov 10 2026 builds fixed 2610 build 20527.20196 (Current Channel)
- vendor:Microsoft Office for Mac (365, LTSC 2021, LTSC 2024) affected < 16.115.26110837 fixed 16.115.26110837

## How to check

In Word, open File > Account > About Word and compare the build with the fixed builds: Windows LTSC 2021 must be 16.0.14334.21048 or later, LTSC 2024 16.0.17932.21140 or later, Microsoft 365 Apps on Current Channel 2610 build 20527.20196 or later. Mac must be 16.115.26110837 or later. Microsoft's Nov 10, 2026 release notes list this CVE under Word.

## Fix

Install the November 10, 2026 Office security update. Windows Click-to-Run builds: Current Channel 2610 build 20527.20196; Monthly Enterprise 2610 build 20527.20194 / 2609 build 20430.20264 / 2608 build 20326.20320; Semi-Annual Enterprise 2610 build 20527.20192 / 2609 build 20430.20262 / 2608 build 20326.20318; Office LTSC 2024 build 17932.21140; Office LTSC 2021 build 14334.21048. Mac: 16.115.26110837 (per the NVD list from Microsoft).

## Timeline

- 2026-11-10T19:24:38+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113759
- 2026-11-10T23:56:34+00:00 analyst https://nvd.nist.gov/vuln/detail/cve-2026-113759 — Nov 2026 Patch Tuesday; listed under Word in Microsoft Learn Office security release notes (Nov 10). Affected ranges from Microsoft CNA data in NVD. CVSS UI:R (needs user to open a file). Not in KEV, no PoC seen. Did not search social: no CVE-specific chatter likely. MSRC page is JS-only, not read. Fix verified only from Learn release notes; Mac version and affected ranges come from NVD, not verified.

## Documents

- [describes] NVD CVE-2026-113759 (Microsoft CNA affected list) https://nvd.nist.gov/vuln/detail/cve-2026-113759
- [fix] Microsoft Office security updates release notes (Nov 10, 2026) https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates

## From the sources

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_