CVE-2026-78519

HighCVSS 8.8

Published: 08/09/2026(UTC)Updated: 09/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

47th percentile - higher than 47% of all known CVEs

Summary

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Risk Assessment

An attacker could exploit the vulnerability to execute code remotely, potentially leading to system compromise or data theft.

Recommendation

Install security updates for Microsoft Office Outlook and avoid opening suspicious emails.

Other vulnerabilities in Microsoft Office Outlook

See all

CVE-2026-97749Critical
Microsoft Office Outlook is affected by a double free vulnerability. This allows an unauthorized attacker to execute code over a network.
CVE-2026-97016Critical
Microsoft Office Outlook is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
CVE-2026-88156Critical
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70291Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70242Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78509Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-108448High
A heap-based buffer overflow in Microsoft Office Outlook allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.
CVE-2026-97012High
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70282High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70281High
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

Original NVD description (English source)

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS