CERT-FR Flags Mass Microsoft Office CVE Batch
CERT-FR advisory lists over 100 Microsoft Office vulnerabilities patched in the August 2026 update covering RCE, privilege escalation, and data exposure.
CERT-FR published a routine security advisory summarizing a large batch of vulnerabilities affecting multiple Microsoft Office products, including Office 2016, 2019, LTSC 2021/2024, Access, Excel, Outlook, PowerPoint, Word, and Microsoft 365 Apps for Enterprise across Windows and Mac platforms. The advisory references over 100 individual CVEs disclosed by Microsoft's security bulletin dated 11 August 2026, with impacts ranging from remote code execution and privilege escalation to security bypass and confidentiality breaches.
No exploitation in the wild, proof-of-concept code, or specific threat actor activity is mentioned in the advisory. This is a standard vendor patch notification aggregated by the French national CERT, advising organizations to apply the vendor-supplied fixes referenced in the Microsoft Security Response Center update guide for each CVE. Given the scale of the update and reliance on Office as a common enterprise attack surface, organizations should prioritize patch deployment despite the absence of confirmed active exploitation.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1000
This is the public brief
Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.
Start free