CVE-2026-20943
No fix known EPSS <1%CVSS 7.0
Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.
Products: Microsoft Office 2016, Microsoft Office Deployment Tool, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition