Microsoft product teams and the Microsoft Security Response Center (MSRC) collaborated on a technical analysis of vulnerabilities related to AI in Microsoft Word. The findings reveal potential security risks associated with AI integration in word processing software.

Wiz Research identified a critical vulnerability (CVE-2026-3854) in GitHub's internal git infrastructure that allows authenticated users to execute arbitrary commands on backend servers with a single git push command. This vulnerability is notable as one of the first critical flaws found in closed-source binaries using AI.