# CERT-FR Warns of Microsoft Office RCE Flaw

Published: 2026-09-24 · Severity: routine
Canonical: https://vorant.io/reports/6d710832-d85e-514b-8b21-4b0686d3bcce/cert-fr-warns-of-microsoft-office-rce-flaw

> A remote code execution vulnerability (CVE-2026-70125) affects Microsoft 365 Apps and Office LTSC 2021/2024; patch per Microsoft's advisory.

CERT-FR has issued an advisory regarding a vulnerability in Microsoft Office that allows an attacker to achieve remote code execution. The affected products include Microsoft 365 Apps for Enterprise (32-bit and 64-bit), Microsoft Office LTSC 2021 (32-bit and 64-bit editions), and Microsoft Office LTSC 2024 (32-bit and 64-bit editions). The bulletin does not specify the attack vector in detail, nor does it indicate whether the vulnerability is currently being exploited in the wild.

Defenders running any of the listed Microsoft Office versions should consult Microsoft's official security bulletin for CVE-2026-70125 and apply the corresponding patches as soon as they are available. No indicators of compromise, threat actor attribution, or evidence of active exploitation were provided in this advisory. Given the broad deployment of Microsoft Office products across most organizations, timely patching is recommended as standard practice for any RCE vulnerability, even absent confirmed in-the-wild exploitation at this time.

## Mentioned in this report

- Vulnerabilities: CVE-2026-70125

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1224

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/6d710832-d85e-514b-8b21-4b0686d3bcce/cert-fr-warns-of-microsoft-office-rce-flaw.
In the app the same report carries its extracted indicators, its detections with Splunk SPL and Microsoft KQL already written, live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup