Microsoft's October 13 security release addresses 13 vulnerabilities in Microsoft Office Access: 12 remote-code-execution flaws and one information-disclosure flaw. All are rated Important; ten of the code-execution issues have a CVSS score of 8.8.

Microsoft says these attacks require someone to open a malicious file; the Preview Pane is not an attack route. At release, Microsoft listed none as publicly disclosed or exploited and assessed exploitation as less likely.

Listed affected products include Microsoft 365 Apps for Enterprise and Office LTSC 2021 and 2024, in both 32-bit and 64-bit editions. MSRC lists fixed builds 16.0.14334.20974 for LTSC 2021 and 16.0.17932.21056 for LTSC 2024. Microsoft 365 users should check the Office security notes for their channel; October build details were not yet shown when checked.

See Microsoft's October security data and its advisories for CVE-2026-102849 and CVE-2026-94506.