[NEW] [high] Microsoft Office: Multiple vulnerabilities

highCVE-2026-62896 CVE-2026-62918 CVE-2026-65667 CVE-2026-62836 CVE-2026-50515

An attacker can exploit multiple vulnerabilities in Microsoft Teams, Microsoft Azure Managed Instance, and Microsoft Service Bus to execute arbitrary code, gain elevated privileges, or manipulate data.

CSIRTS triage

vendor: Microsoft product: Office Remote code execution Privilege escalationOther

What: Multiple vulnerabilities in Microsoft Teams, Azure Managed Instance, and Service Bus enable arbitrary code execution, privilege escalation, and data manipulation.
Who is affected: Organizations using Microsoft Teams, Azure Managed Instance, or Service Bus are affected.
Urgency: High severity due to remote code execution and privilege escalation capabilities in widely-used services.
Action: Apply Microsoft security patches to Teams, Azure, and Service Bus components immediately.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Office

Get an email when a new Office advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-08-07
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2692

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-628960.47% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 39% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-629180.45% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-656670.62% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 48% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-628360.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all EPSS-scored CVEs.
Moderate exploitation riskCVE-2026-505151.1% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 64% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-62896	coverage & exploitation status	NVD · CVE.org
CVE-2026-62918	coverage & exploitation status	NVD · CVE.org
CVE-2026-65667	coverage & exploitation status	NVD · CVE.org
CVE-2026-62836	coverage & exploitation status	NVD · CVE.org
CVE-2026-50515	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Microsoft Office

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

high[NEU] [hoch] Microsoft Office Produkte: Mehrere Schwachstellencert-bund · 2026-09-09
unknownMultiples vulnérabilités dans Microsoft Office (09 septembre 2026)cert-fr-avis · 2026-09-09
unknownNCSC-2026-0352 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl · 2026-09-08
mediumCVE-2026-85875: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose infor…nvd · 2026-09-08
mediumCVE-2026-83951: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose informat…nvd · 2026-09-08
mediumCVE-2026-83949: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose informat…nvd · 2026-09-08