CVE-2026-78439: Microsoft Office Graphics Component Remote Code Execution Vulnerability
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Other sources
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20430.20000
Event History
Frequently Asked Questions
Which Microsoft Office deployments are identified as affected?
The listed affected products are Microsoft Office for Android, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, and Microsoft Office 365 for Mac.
Does exploitation require authentication or a complex attack path?
The supplied severity vector indicates network attack access, low attack complexity, and no privileges required. It also indicates user interaction is required.
What is the potential impact if exploitation succeeds?
Successful exploitation can allow an unauthorized attacker to execute code. The severity vector rates confidentiality, integrity, and availability impact as high.