What changed on November 13, 2026
The latest MSRC November data changes the listed Office impact for CVE-2026-95932, CVE-2026-95948 and CVE-2026-95953 to Elevation of Privilege. This resolves the previous mismatch between those Office rows and Microsoft’s local privilege-escalation descriptions. The vendor still rates them Important, CVSS 3.1 7.8. Office-specific prerequisites remain unverified.
All three apply to Microsoft Office for Android from 16.0.1 below 16.0.20625.20014. CVE-2026-95932 and CVE-2026-95953 also apply to the Mac editions and ranges listed below, fixed in 16.115.26110837. The fix floors are unchanged. Microsoft reports no known exploitation or public disclosure, and CISA KEV lists none of the three. Keep the managed-app rollout and verify the installed app builds. Last verified November 14, 2026 UTC. MSRC November CVRF.
If you closed the November Office patch ticket from Windows reports, check the managed Android and Mac apps too. Microsoft expanded the list of advisories that apply to these Office builds.
What changed on November 13, 2026
Microsoft added Office for Android to eight more advisories and added three Mac Office editions to four of those eight. The advisories were first published November 10, 2026. Microsoft-authored CVE records updated November 13 confirm the additional product ranges. The fixed Office builds are the same ones listed in the November 12 update below.
Android priorities. CVE-2026-113749 is Critical, CVSS 3.1 7.5, for remote code execution. Microsoft’s underlying CVSS vector specifies network access, no authentication, user interaction and high attack complexity. CVE-2026-121680 is Important, CVSS 3.1 7.5, for NTLM spoofing that could expose an NTLMv2 hash in Microsoft’s described Windows scenario. Microsoft has yet to document how those conditions apply to Office on Android.
Other November 13 Office additions. CVE-2026-95922 (7.0), CVE-2026-95932 (7.8), CVE-2026-95942 (7.8) and CVE-2026-119856 (5.5) add Android and Mac. CVE-2026-96126 (7.8) and CVE-2026-96144 (4.7) add Android. Microsoft rates all six Important using CVSS 3.1. The Windows descriptions cover local privilege escalation or information disclosure. An earlier Office impact row for CVE-2026-95932 said remote code execution. MSRC has since corrected it to elevation of privilege. The Office-specific attack conditions remain unverified.
MSRC reports no known exploitation or public disclosure for the eight CVEs, and none is in CISA KEV as of November 13. MSRC rates exploitation more likely for CVE-2026-96126 and less likely for the other seven. No Office-specific workaround, compromise check or credential rotation was verified.
November 12 scope update
Microsoft added Office app builds on Android and Mac to four advisories first published November 10, 2026.
Affected and fixed builds
Android: Microsoft Office 16.0.1 through builds below 16.0.20625.20014 is affected by all twelve CVEs in this entry. Microsoft lists 16.0.20625.20014 as the fixed build. Managed Google Play availability was not independently verified.
Mac. CVE-2026-95953, CVE-2026-88217, CVE-2026-95922, CVE-2026-95932, CVE-2026-95942 and CVE-2026-119856 affect Office 365 for Mac from 1.0.0, Office LTSC for Mac 2021 from 16.0.1 and Office LTSC for Mac 2024 from 16.0.0, each up to but excluding 16.115.26110837. Microsoft’s Mac release notes list that fixed build on November 10.
Severity and exploitation
Microsoft rates the Office entries Important. The published CVSS v3.1 scores are 7.8 for CVE-2026-95948 and CVE-2026-95953, 5.5 for CVE-2026-88217 and 5.6 for CVE-2026-96150. MSRC assesses exploitation as less likely and records no known exploitation or public disclosure. None of the four is in CISA KEV as of November 12.
Earlier MSRC data labeled the Office impact for CVE-2026-95948 and CVE-2026-95953 as remote code execution. The November CVRF now lists elevation of privilege. Office-specific attack prerequisites remain unverified. Microsoft’s CVE records separately confirm the listed Office version ranges.
MSP action
Suggested priority: Prompt managed-app rollout. Inventory Office editions and installed builds in Intune or the applicable MDM. Use managed Google Play or the approved Office for Mac update channel. Confirm the installed build and app health after relaunch. If a managed channel has yet to offer the fixed build, track that device as pending. No vendor workaround or compromise-check procedure was verified for these Office builds.
Official sources
Microsoft November security data · CVE-2026-95948 · CVE-2026-95953 · CVE-2026-88217 · CVE-2026-96150 · Office for Mac release notes · CISA KEV
Microsoft-authored CVE records for November 13: CVE-2026-113749 · CVE-2026-121680 · CVE-2026-95922 · CVE-2026-95932 · CVE-2026-95942 · CVE-2026-96126 · CVE-2026-96144 · CVE-2026-119856
Last verified November 13, 2026.