CVE-2026-78519
Analyzed Analyzed - Analysis Complete

Use of Uninitialized Resource in Microsoft Office Outlook Allows Code Execution

Vulnerability report for CVE-2026-78519, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-08

Last updated on: 2026-09-09

Assigner: Microsoft Corporation

Description

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-08
Last Modified
2026-09-09
Generated
2026-09-29
AI Q&A
2026-09-10
EPSS Evaluated
2026-09-27
NVD

Affected Vendors & Products

Showing 10 associated CPEs
Vendor Product Version / Range
microsoft 365_apps *
microsoft 365_apps *
microsoft outlook 2016
microsoft outlook 2016
microsoft office_2019 *
microsoft office_2019 *
microsoft office_2021 *
microsoft office_2021 *
microsoft office_2024 *
microsoft office_2024 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-908 The product uses or accesses a resource that has not been initialized.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves the use of an uninitialized resource in Microsoft Office Outlook. An attacker could exploit this to execute arbitrary code remotely over a network without authentication.

Impact Analysis

An attacker could gain control of your system, steal data, install malware, or perform other malicious actions. This could lead to significant security breaches, data loss, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face legal penalties, fines, or reputational damage.

Mitigation Strategies

Apply the latest security updates from Microsoft for Outlook and Office applications as soon as they become available to patch the uninitialized resource vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78519. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart