CVE-2026-78505 – Microsoft Office Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A malicious Office document can turn a routine file interaction into remote code execution, putting sensitive data and system integrity at risk.”
CVE-2026-78505 is a heap-based buffer overflow vulnerability in Microsoft Office that can allow an unauthorized attacker to execute code in the context of the user. An attacker can convince a user to open and save a specially crafted Microsoft Office document, and the Preview Pane is also identified as an attack vector. Authentication and prior privileges are not required, although successful exploitation requires user interaction.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.