Microsoft 365 threat report

CVE-2026-102855, a high-severity heap-based buffer overflow in Microsoft Office Visio (Microsoft 365 Apps for Enterprise, CVSS 8.8), allows remote code execution over a network. The vulnerability affects Microsoft 365 Apps for Enterprise version 16.0.1 and later, Microsoft Office LTSC 2021, and Microsoft Office LTSC 2024. Microsoft released patch guidance on October 13, 2026.

• CVE-2026-102855: Microsoft 365 Apps for Enterprise Heap Buffer…(opens in a new tab)