Microsoft Patches Multiple Office, Word, and Outlook RCE Flaws
Vulnerability Disclosure · 9 sources · Updated 4mo ago · First seen May 25, 2026
Microsoft disclosed and patched several remote code execution vulnerabilities affecting Microsoft Office, Word, and Outlook, including CVE-2025-49698, CVE-2025-49702, CVE-2025-54906, CVE-2025-62554, CVE-2025-62557, CVE-2025-62558, and CVE-2025-62562. The advisories identify repeated RCE issues across core productivity applications, with separate entries for Office-wide flaws as well as product-specific weaknesses in Word and Outlook.
The cluster of disclosures indicates a sustained stream of code-execution bugs in Microsoft’s document and messaging ecosystem, raising the risk of compromise through malicious files or email content handled by widely deployed enterprise software. Organizations using Microsoft 365 and on-premises Office components should prioritize the relevant security updates and verify patch coverage for Office, Word, and Outlook installations across user endpoints.
