CVE-2026-108428 Microsoft Office Word Remote Code Execution Vulnerability

{
  "id": "6cc49a074273668abefdcc3e7b7c5df63969bce0ede1c3072dc060e65a95ce2d",
  "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108428",
  "method": "llm",
  "payload": {
    "kind": "other",
    "title": "CVE-2026-108428 Microsoft Office Word Remote Code Execution Vulnerability",
    "summary": "This is an informational update: the CVE was addressed by updates released in October 2026, but omitted from that month's Security Updates. Customers who installed those updates need no further action.",
    "evidence": "This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only.",
    "products": [
      {
        "name": {
          "value": "Microsoft Office Word",
          "evidence": "CVE-2026-108428 Microsoft Office Word Remote Code Execution Vulnerability"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-108428",
        "evidence": "CVE-2026-108428 Microsoft Office Word Remote Code Execution Vulnerability"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-microsoft-security-updates",
  "document_id": 24569,
  "published_at": "2026-10-15T14:00:00+00:00"
}