Microsoft releases update to address zero-day vulnerability in Microsoft Office

Microsoft has published three out-of-band (OOB) updates so far in January 2026. One of these updates was released to address a vulnerability, CVE-2026-21509, affecting Microsoft Office that has been reportedly exploited in the wild. 

First seen on blog.talosintelligence.com

Jump to article: blog.talosintelligence.com/microsoft-oob-update-january-2026/