Security News Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation TheHackerNews Daniel Bender 27 Jan 2026 Microsoft released out-of-band patches for an actively exploited Microsoft Office zero-day, CVE-2026-21509, a security feature bypass flaw.