LUCAMEMicrosoft has quietly expanded the list of affected products for a known Windows Imaging Component vulnerability, CVE-2026-62740. It turns out certain editions of Microsoft Office are also exposed, not just Windows itself. The flaw allows information disclosure, meaning an attacker could potentially read data they shouldn't have access to. Microsoft has now added Office to the official security updates table and is pushing patches out.
What this means for your business
If your business runs Microsoft Office, you'll want to make sure it's fully updated as soon as possible. This isn't just a Windows patch job - Office needs attention separately. Check with your IT team or us that the latest security updates have been applied across all devices, particularly any that handle sensitive client or financial data.