A zero-day vulnerability in Microsoft Office is being actively exploited, prompting the company to release an emergency fix. The vulnerability, identified as CVE-2026-21509, has been patched in an out-of-band update. Microsoft has issued the fix to address the active exploitation of this Office zero-day vulnerability.