← Database

CVE-2026-81385

HIGH CVSS: 8.8 Published: 2026-09-08 Modified: 2026-09-09

Description

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

Affected Platforms

Microsoft PublisherMicrosoft 365 AppsMicrosoft Office 2021Microsoft Office 2024Microsoft Office 2019

Weakness Type

CWE-502

References