CVE-2026-78504 Advisory
Severity: HIGH (CVSS 8.8)
Affected Product:
- Microsoft Defender Business
Vulnerability: Stack-based buffer overflow in Microsoft Office Word enabling remote code execution.
KEV Status: Not currently exploited in the wild
Remediation: Apply security updates from Microsoft. Refer to the Microsoft Security Response Center advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504
Action: Prioritize patching given the network-exploitable nature and high CVSS score.