CVE-2026-80085
Severity: HIGH (CVSS 8.8)
Affected Product:
- Microsoft Defender Business
Vulnerability: Heap-based buffer overflow in Microsoft Office Word allowing remote code execution.
KEV Status: Not currently listed on CISA KEV Catalog
Remediation:
- Review Microsoft Security Response Center (MSRC) advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085
- Apply patches from Microsoft when available
- Restrict document handling from untrusted sources
Details for MSPs/IT Teams: This vulnerability requires network access and can lead to unauthorized code execution. Immediate patching is recommended upon availability.