Patch Gap

Everyday apps · updated Oct 27, 2026

Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks

Patched: update nowBeing attacked nowHigh

Last checked · Check before installing; only use the official link.

A bug in Microsoft Word lets a booby-trapped document get around a safety check. Microsoft fixed it in the February 2026 Office update.

Status
Patched: update now
Being attacked?
Yes[2]
Severity
High
Updated

CISA lists it as used in real attacks (added Feb 10, 2026). Microsoft marks it as exploited. Severity: Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked). First reported .

Am I affected?

You are at risk if Word on your Windows PC has not updated since February 10, 2026.

AppDeviceAffectedFixed in
Microsoft Office (Word, Excel, Outlook, PowerPoint)WindowsMicrosoft Word / Office on Windows without the February 2026 updateFixed by Microsoft's February 2026 Office security update (Feb 10, 2026) or any newer update.[1]

How to check your version

These checks only look. They do not change anything on your computer.

Microsoft Office (Word, Excel, Outlook, PowerPoint) on Windows

Easy way: Open Word (or Excel). Click File > Account > Update Options > Update Now. The version is shown under About Word.

Or type this in PowerShellRead-only. It only reads the version and changes nothing.

(Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Office\ClickToRun\Configuration' -ErrorAction SilentlyContinue).VersionToReport

How to fix it

  1. Open Word, Excel or any Office app.
  2. Click File > Account.
  3. Click Update Options > Update Now.
  4. Close all Office apps when asked so the update can finish.

More on each app: Is my Microsoft Office up to date?

Official links

Check before installing, and only use these official links or the app's own update button.

For AI agents

This page as data: /incidents/office-word-attacked-bug-feb-2026.json. All problems: /feed.json. Use read-only checks only, and ask before installing anything.

Tracking numbers (CVE): CVE-2026-21514

Sources

  1. MakerMicrosoft Security Update Guide: CVE-2026-21514 (February 2026 update) (Feb 10, 2026)
  2. CISACISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-21514 (added 2026-02-10) (Feb 10, 2026)
  3. NVDNVD: CVE-2026-21514 (Feb 10, 2026)

"Maker", "CISA", "NVD", "GitHub advisory" and "Official notice" are official sources. "Researcher" and "News" are extra context.