Browse rankings
All news & advisories
High

CVE-2026-77901: Security Advisory

CVE-2026-77901 CVSS 8.8
Who it affects
See the summary below.
What to do
Apply the vendor's update in your next patch window.

CVE-2026-77901 Advisory

Severity: HIGH (CVSS 8.8)

Affected Product:

  • Microsoft Defender Business

Vulnerability Description: Null pointer dereference in Microsoft Office Word allows remote code execution over a network without authentication.

KEV Status: Not currently listed as exploited in known exploited vulnerabilities catalog.

Remediation: Apply security updates from Microsoft. Refer to the official advisory for specific patch availability and deployment guidance.

Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901

Data as of September 9, 2026. Sources: nvd.nist.gov, msrc.microsoft.com. Figures are pulled from public vendor and security data and refreshed automatically.
Back to all news & advisories