{
 "schema_version": "1.0",
 "generated_at": "2026-11-07T18:30:10Z",
 "last_checked": "2026-11-07T17:33:08+00:00",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "product": {
  "slug": "microsoft-office",
  "name": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
  "short_name": "Microsoft Office",
  "page_url": "https://patchgap.ai/is-my-microsoft-office-up-to-date/",
  "minimum_safe_version": null,
  "minimum_safe_version_source": [
   {
    "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
    "title": "Microsoft: October 2026 Security Updates release notes (164 Office fixes)",
    "date": "2026-10-13",
    "kind": "vendor"
   }
  ],
  "baseline": {
   "version": null,
   "applies_to": null,
   "source_incident": "office-october-2026-updates",
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
     "title": "Microsoft: October 2026 Security Updates release notes (164 Office fixes)",
     "date": "2026-10-13",
     "kind": "vendor"
    }
   ],
   "covers_everything_listed": false,
   "newest_fix": "Fixed in the October 2026 Office updates (Microsoft Update Guide lists the version).",
   "caveats": [
    "These are fixed by an update without one version number we can compare, so check their pages: office-attacked-bug-jan-2026, office-october-2026-updates, office-word-attacked-bug-feb-2026."
   ],
   "text": "There is no single version number for Microsoft Office. The newest fix listed here is: Fixed in the October 2026 Office updates (Microsoft Update Guide lists the version). If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below)."
  },
  "update_steps": {
   "windows": [
    "Open any Office app > File > Account.",
    "Click Update Options > Update Now.",
    "Close Office apps when asked."
   ],
   "macos": [
    "Open any Office app > Help > Check for Updates.",
    "Install the updates Microsoft AutoUpdate shows."
   ]
  },
  "last_checked": "2026-11-07T17:33:08+00:00",
  "vendor": "Microsoft",
  "category": "apps",
  "platforms": [
   "windows",
   "macos"
  ],
  "what_it_is": "Word, Excel, Outlook, PowerPoint and OneNote on your computer.",
  "url": "https://patchgap.ai/is-my-microsoft-office-up-to-date/",
  "json_url": "https://patchgap.ai/products/microsoft-office.json",
  "official_site": "https://www.microsoft.com/microsoft-365",
  "official_download": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5",
  "how_it_updates": "Office updates itself. You can start it from File > Account > Update Options > Update Now (Windows) or Help > Check for Updates (Mac).",
  "check": {
   "windows": {
    "menu_path": "Open Word (or Excel). Click File > Account > Update Options > Update Now. The version is shown under About Word.",
    "command": "(Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Office\\ClickToRun\\Configuration' -ErrorAction SilentlyContinue).VersionToReport",
    "shell": "PowerShell",
    "read_only": true
   },
   "macos": {
    "menu_path": "Open Word. Menu bar: Word > About Word. Or Word > Check for Updates.",
    "command": "defaults read \"/Applications/Microsoft Word.app/Contents/Info\" CFBundleShortVersionString",
    "shell": "Terminal",
    "read_only": true
   }
  },
  "open_incidents": [
   "office-word-attacked-bug-feb-2026",
   "office-attacked-bug-jan-2026",
   "office-october-2026-updates"
  ]
 },
 "incidents": [
  {
   "id": "office-word-attacked-bug-feb-2026",
   "url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026/",
   "path": "/incidents/office-word-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json",
   "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks",
   "category": "apps",
   "platforms": [
    "windows"
   ],
   "products": [
    "microsoft-office"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists it as used in real attacks (added Feb 10, 2026). Microsoft marks it as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-02-10",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-21514"
   ],
   "summary": "A bug in Microsoft Word lets a booby-trapped document get around a safety check. Microsoft fixed it in the February 2026 Office update.",
   "am_i_affected": "You are at risk if Word on your Windows PC has not updated since February 10, 2026.",
   "action": "Update Office (February 2026 update or newer)",
   "affected": [
    {
     "product": "microsoft-office",
     "product_name": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
     "platform": "windows",
     "affected_versions": "Microsoft Word / Office on Windows without the February 2026 update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by Microsoft's February 2026 Office security update (Feb 10, 2026) or any newer update.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21514"
     ],
     "check": {
      "menu_path": "Open Word (or Excel). Click File > Account > Update Options > Update Now. The version is shown under About Word.",
      "command": "(Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Office\\ClickToRun\\Configuration' -ErrorAction SilentlyContinue).VersionToReport",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    }
   ],
   "fix_steps": [
    "Open Word, Excel or any Office app.",
    "Click File > Account.",
    "Click Update Options > Update Now.",
    "Close all Office apps when asked so the update can finish."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: install Office updates",
     "url": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    },
    {
     "label": "Microsoft: CVE-2026-21514 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21514"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21514",
     "title": "Microsoft Security Update Guide: CVE-2026-21514 (February 2026 update)",
     "date": "2026-02-10",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-21514 (added 2026-02-10)",
     "date": "2026-02-10",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21514",
     "title": "NVD: CVE-2026-21514",
     "date": "2026-02-10",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "office-attacked-bug-jan-2026",
   "url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026/",
   "path": "/incidents/office-attacked-bug-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json",
   "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks",
   "category": "apps",
   "platforms": [
    "windows"
   ],
   "products": [
    "microsoft-office"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists it as used in real attacks (added Jan 26, 2026). Microsoft marks it as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-01-26",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-21509"
   ],
   "summary": "A bug in Microsoft Office lets a booby-trapped document get around a safety check that normally blocks risky content. Attackers sent such documents by email. Microsoft released fixes in January 2026. Microsoft 365 users get the fix after Office restarts; some older Office versions needed extra steps from Microsoft.",
   "am_i_affected": "You are at risk if you use Office on Windows and it has not updated since January 2026. Older boxed versions (Office 2016 and 2019) needed a separate fix, so check Microsoft's page for your version.",
   "action": "Update Office (January 2026 update or newer)",
   "affected": [
    {
     "product": "microsoft-office",
     "product_name": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
     "platform": "windows",
     "affected_versions": "Microsoft Office on Windows (Microsoft 365, Office 2016, 2019, 2021 and 2024) without Microsoft's January 2026 fix",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by Microsoft's January 2026 Office updates or any newer update. Microsoft's page lists the fix for each Office version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509"
     ],
     "check": {
      "menu_path": "Open Word (or Excel). Click File > Account > Update Options > Update Now. The version is shown under About Word.",
      "command": "(Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Office\\ClickToRun\\Configuration' -ErrorAction SilentlyContinue).VersionToReport",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    }
   ],
   "fix_steps": [
    "Open Word, Excel or any Office app.",
    "Click File > Account.",
    "Click Update Options > Update Now.",
    "Close all Office apps when asked so the update can finish.",
    "Do not open Office files from emails you did not expect."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: install Office updates",
     "url": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    },
    {
     "label": "Microsoft: CVE-2026-21509 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509",
     "title": "Microsoft Security Update Guide: CVE-2026-21509 (January 2026 update)",
     "date": "2026-01-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-21509 (added 2026-01-26)",
     "date": "2026-01-26",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21509",
     "title": "NVD: CVE-2026-21509",
     "date": "2026-01-26",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "office-october-2026-updates",
   "url": "https://patchgap.ai/incidents/office-october-2026-updates/",
   "path": "/incidents/office-october-2026-updates/",
   "json_url": "https://patchgap.ai/incidents/office-october-2026-updates.json",
   "title": "Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes",
   "category": "apps",
   "platforms": [
    "windows",
    "macos"
   ],
   "products": [
    "microsoft-office"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Microsoft lists many bugs in Word, Excel, Outlook and PowerPoint that can run a program when you open a bad file (Tenable's scanner notes list them).",
   "exploited_in_wild": "no",
   "exploited_note": "Microsoft's October 2026 notes name only one attacked bug (the Windows one). None of the Office fixes are marked as attacked.",
   "exploited_source_url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-13",
   "updated_at": "2026-10-27",
   "cves": [],
   "summary": "Microsoft fixed 164 problems in Office this month. Some of them let a bad Word, Excel or Outlook file take over your computer when you open it. Microsoft has not said that hackers are using the Office bugs yet. Update Office to be safe.",
   "am_i_affected": "You are at risk if you use Word, Excel, Outlook, PowerPoint or OneNote and have not updated Office since early October 2026.",
   "action": "Update Microsoft Office (Word, Excel, Outlook, PowerPoint)",
   "affected": [
    {
     "product": "microsoft-office",
     "product_name": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
     "platform": "windows",
     "affected_versions": "Microsoft 365 / Office on Windows that has not installed the October 2026 update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed in the October 2026 Office updates (Microsoft Update Guide lists the version).",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct"
     ],
     "check": {
      "menu_path": "Open Word (or Excel). Click File > Account > Update Options > Update Now. The version is shown under About Word.",
      "command": "(Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Office\\ClickToRun\\Configuration' -ErrorAction SilentlyContinue).VersionToReport",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    },
    {
     "product": "microsoft-office",
     "product_name": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
     "platform": "macos",
     "affected_versions": "Office for Mac that has not installed the October 2026 update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed in the October 2026 Office updates for Mac. Microsoft's Update Guide lists the version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct"
     ],
     "check": {
      "menu_path": "Open Word. Menu bar: Word > About Word. Or Word > Check for Updates.",
      "command": "defaults read \"/Applications/Microsoft Word.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    }
   ],
   "fix_steps": [
    "Open Word or Excel.",
    "Windows: click File > Account > Update Options > Update Now.",
    "Mac: click Help > Check for Updates, then Update.",
    "Close and open Office again when it finishes.",
    "Do not open Office files from people you do not know until you have updated."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: install Office updates",
     "url": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    },
    {
     "label": "Microsoft October 2026 update notes",
     "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
     "title": "Microsoft: October 2026 Security Updates release notes (164 Office fixes)",
     "date": "2026-10-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.tenable.com/plugins/nessus/365620",
     "title": "Tenable: Office C2R October 2026 security updates (list of bugs)",
     "date": "2026-10",
     "kind": "research",
     "official": false
    }
   ]
  }
 ]
}