CVE-2026-124194: Microsoft Outlook Spoofing Vulnerability

Published Nov 10, 2026

Updated

Microsoft Outlook Spoofing Vulnerability

Other sources

Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

— Microsoft

Affected Software

1 affected component

Microsoft Microsoft Outlook

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

Known Exploited

via Microsoft·04:00 PM

CVE Published

via MITRE·06:22 PM

Data Sourced

via MITRE·06:22 PM

DescriptionSeverity

Data Sourced

via NVD·07:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Is this vulnerability being exploited in the wild?

Yes. It is listed in the Known Exploited Vulnerabilities catalog as of 2026-11-10.

What access does an attacker need to exploit it?

The attack can be performed over a network and does not require attacker privileges. User interaction is required.

What is the potential impact?

A successful attack could allow spoofing. The provided vector rates confidentiality impact as high, while integrity and availability impact are rated none.

CVE-2026-124194: Microsoft Outlook Spoofing Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

Is this vulnerability being exploited in the wild?

What access does an attacker need to exploit it?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Is this vulnerability being exploited in the wild?

What access does an attacker need to exploit it?

What is the potential impact?