CNNVD-202601-2050 Information

CNNVD ID

CNNVD-202601-2050

CVE-2026-20948

  • CNNVD Published: 2026-01-13

Description (Chinese)

Microsoft Word是美国微软(Microsoft)公司的一套Office套件中的文字处理软件。 Microsoft Word存在安全漏洞。攻击者利用该漏洞可以远程执行代码。以下产品和版本受到影响:Microsoft SharePoint Enterprise Server 2016,Microsoft SharePoint Server 2019,Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit editions,Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for 64-bit Systems,Microsoft Office LTSC for Mac 2021,Microsoft Office LTSC 2021 for 64-bit editions,Microsoft Office LTSC 2021 for 32-bit editions,Microsoft Office LTSC 2024 for 32-bit editions,Microsoft Office LTSC 2024 for 64-bit editions,Microsoft Office LTSC for Mac 2024,Microsoft Word 2016 (32-bit edition),Microsoft Word 2016 (64-bit edition)。

Description (English)

Microsoft Word is the word-processing software in an Office package of Microsoft (USA). Microsoft Word has a security breach. The attackers used the loophole to implement the code remotely. The following products and versions are affected: Microsoft SharePoint Enterprise Service 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit applications, Microsoft Office 2019 for 64-bit applications, Microsoft Apps for Enterprise 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office Ltd. 2021, Microsoft Office LTSC 2021 for 32-bit appointments, Microsoft Office LTSC for 32-bit Systems for 32-bit Systems, Microsoft 365 Apps for Enterprise for Services for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for 2021 for 64-bit assessments, Microsoft Office appointments for 2024, Microsoft OfficeLTSC for Service Order 2024-W.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

微软

Published

2026-01-13

Last Modified

2026-02-24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20948

Patch

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20948

Share on: