CVE-2026-78520
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute malicious code on the victim's machine, potentially leading to full system compromise or data theft.
Recommendation
Update Microsoft Outlook immediately and restrict network access for unauthorized users.
Other vulnerabilities in Microsoft Office Outlook
See all- CVE-2026-100208High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78509Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70125High
Microsoft Office Outlook contains a remote code execution vulnerability. Technical details were not provided in the description.
- CVE-2026-80084Medium
Out-of-bounds read in Microsoft Office Outlook. An unauthorized attacker can disclose information over a network.
- CVE-2026-80073Medium
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
- CVE-2026-78525High
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78519High
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-69629High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70329High
An integer overflow vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-62882Medium
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS