CVE-2026-78509
CriticalCVSS 9.8Summary
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code in the context of Outlook, potentially leading to system compromise or data theft.
Recommendation
Install the latest security updates for Microsoft Office. Be cautious when opening emails and attachments.
Other vulnerabilities in Microsoft Office Outlook
See all- CVE-2026-78525High
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78519High
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70329High
An integer overflow vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-62882Medium
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.