CVE-2026-64904 Microsoft Office Remote Code Execution Vulnerability Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. EPSS 0.00 CVE-2026-64904 Microsoft US Microsoft Security · 11. 8. 16:00