VDB

CVE-2026-55133

CVE-2026-55133 PUBLISHED CVSS 7.8 HIGH

Reported by microsoft · Published July 14, 2026

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
MicrosoftMicrosoft 365 Apps for Enterprise16.0.1
MicrosoftMicrosoft Office 365 for Mac1.0.0
MicrosoftMicrosoft Office LTSC for Mac 202116.0.1
MicrosoftMicrosoft Office LTSC for Mac 202416.0.0
microsoft365_apps16.0.1, 16.0.1, 16.0.1
MicrosoftMicrosoft Office 365 for Mac1.0.0, 1.0.0, 1.0.0
MicrosoftMicrosoft Office LTSC for Mac 202416.0.0, 16.0.0, 16.0.0
MicrosoftMicrosoft 365 Apps for Enterprise16.0.1, 16.0.1, 16.0.1
microsoftoffice_macos_202116.0.1, 16.0.1, 16.0.1
MicrosoftMicrosoft Office LTSC for Mac 202116.0.1, 16.0.1, 16.0.1
microsoftoffice_macos_202416.0.0, 16.0.0, 16.0.0
microsoftoffice_3651.0.0, 1.0.0, 1.0.0

Timeline

  • Jul 14, 2026 CVE Published
  • Jul 15, 2026 Coalition ESS Score
  • Jul 15, 2026 Security Advisory
  • Jul 22, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›