Critical Microsoft Outlook and Word Flaws Enable Malicious Code Execution

Microsoft has disclosed three critical vulnerabilities affecting Microsoft Outlook and Word , all released on June 9, 2026, as part of its coordinated security update. Tracked as CVE-2026-45456, CVE-2026-45458, and CVE-2026-47635, these flaws carry a CVSS base score of 8.4 (Critical) and could allow unauthorized attackers to execute arbitrary code on affected systems without requiring any privileges or user interaction. Critical Microsoft Outlook and Word Flaws All three CVEs…