Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
References
| Link | Resource |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Sep 2026, 22:18
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.4 |
| Summary | (en) Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
24 Sep 2026, 18:18
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. To exploit the vulnerability, an attacker must first convince a user to open a specially crafted Office document. The updates address the vulnerability by correcting how Office validates input before loading DLL files. |
21 Sep 2026, 17:18
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
Information
Published : 2026-09-08 18:20
Updated : 2026-09-25 22:18
NVD link : CVE-2026-78510
Mitre link : CVE-2026-78510
CVE.ORG link : CVE-2026-78510
JSON object : View
Products Affected
microsoft
- office_2016
- office_2019
- 365_apps
- office_2024
- office_2021
- microsoft_365
CWE
CWE-122
Heap-based Buffer Overflow