High · 8.8 CVE-2026-78439 EUVD-2026-73296GHSA-6cw8-rp4c-jfpf

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Published Sep 8, 2026 · Updated Nov 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Office 365 for Mac Product: Microsoft Office for Android Product: Microsoft Office LTSC for Mac 2021 Product: Microsoft Office LTSC for Mac 2024 Platform: Android

Description

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Office 365 for Mac	1.0.0 – < 16.113.26091433	16.113.26091433
Microsoft	Microsoft Office for Android	16.0.1 – < 16.0.20430.20000	16.0.20430.20000
Microsoft	Microsoft Office LTSC for Mac 2021	16.0.1 – < 16.113.26091433	16.113.26091433
Microsoft	Microsoft Office LTSC for Mac 2024	16.0.0 – < 16.113.26091433	16.113.26091433

Advisories 3

MSRC-CVE-2026-78439 Microsoft Office Graphics Component Remote Code Execution Vulnerability Microsoft Security Response Center · Sep 17, 2026
WID-SEC-2026-3234 Microsoft Office Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 8, 2026
NCSC-2026-0352 Kwetsbaarheden verholpen in Microsoft Office NCSC-NL (Netherlands) · Sep 8, 2026

References

Microsoft Office Graphics Component Remote Code Execution Vulnerability vendor-advisory patch