CVE-2026-78439 – Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A malicious Office file can turn one user action into remote code execution, putting sensitive data and system integrity at risk.”
CVE-2026-78439 is a critical stack-based buffer overflow (CWE-121) in the Microsoft Office Graphics Component. An unauthorized remote attacker can trigger the vulnerability by convincing a user to open a specially crafted file. Successful exploitation can execute code in the target context and can have a high impact on confidentiality, integrity, and availability.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-121
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.