CVE-2026-124194
EXPLOITED
MEDIUM 6.5
Active attacks target Microsoft Office flaw (CVE-2026-124194)
Microsoft · Microsoft 365 Apps for Enterprise 16.0.1, Microsoft Office LTSC 2021 16.0.1, Microsoft Office LTSC 2024 16.0.0
EPSS 1.62%
Upgrade Microsoft Office LTSC 2021 to >= 16.0.14334.21048 (CVE-2026-124194 vendor patch).
Read the fix →