CVE-2026-78506

Publié : 8 septembre 2026

Modifié : 8 septembre 2026

Lien officiel NVD

Score CVSS

5.5

MEDIUM

Description détaillée

Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Références et Patchs

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506

Dernières Vulnérabilités

CVE-2026-9166

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

VOIR DÉTAILS

CVE-2026-9163

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

VOIR DÉTAILS

CVE-2026-9161

Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

VOIR DÉTAILS