CVE-2026-78503 Microsoft CVE debrief

Who should care

Defenders responsible for Microsoft Office Word installations, particularly those in enterprise environments, should assess exposure and prioritize remediation.

Why it matters

CVE-2026-78503 is a medium-severity vulnerability in Microsoft Office Word that allows unauthorized information disclosure. Defenders should assess exposure, prioritize remediation, and verify affected systems.

• Potential information disclosure over the network
• Need to verify affected systems and configurations
• Prioritize remediation of vulnerable installations

Technical summary

CVE-2026-78503 is an out-of-bounds read vulnerability in Microsoft Office Word that allows unauthorized information disclosure over a network. The vulnerability has a CVSS score of 6.5 and is classified as MEDIUM severity. Defenders should assess exposure, prioritize remediation, and verify affected systems, configurations, and inventory. The CVE record and NVD entry provide details on the vulnerability, but specific version information and exploitation details are not provided.

Defensive priority

Medium priority for defenders to assess and remediate

Recommended defensive actions

• Assess exposure of Microsoft Office Word installations
• Prioritize remediation of affected systems
• Verify system configurations and inventory

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. However, specific version information and exploitation details are not provided. Defenders should verify affected systems, configurations, and inventory. The vulnerability has a CVSS score of 6.5 and is classified as MEDIUM severity.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.