All news & advisories
Medium

CVE-2026-78503: Security Advisory

CVE-2026-78503 CVSS 6.5
Who it affects
See the summary below.
What to do
Apply the vendor's update in your next patch window.

CVE-2026-78503 Advisory

Severity: Medium (CVSS 6.5)
KEV Status: Not exploited in the wild

Affected Product:

  • Microsoft Defender Business

Vulnerability: Out-of-bounds read in Microsoft Office Word allows unauthorized information disclosure over a network.

Remediation: Apply security updates via Microsoft Security Response Center (MSRC): https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503

Action Required: Review and deploy available patches to affected systems.

Data as of September 9, 2026. Sources: nvd.nist.gov, msrc.microsoft.com. Figures are pulled from public vendor and security data and refreshed automatically.
Back to all news & advisories