CVE-2026-62882: Microsoft Outlook Spoofing Vulnerability
Published Aug 11, 2026
·Updated
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Other sources
Microsoft Outlook Spoofing Vulnerability
— Microsoft
Affected Software
12 affected componentsFixes available
Microsoft 365 Apps
Microsoft 365 Apps
Microsoft Office 2019
Microsoft Office 2019
Microsoft Office 2021
Microsoft Office 2021
Microsoft Office 2024
Microsoft Office 2024
Microsoft Outlook=2016
Microsoft Outlook=2016
Microsoft Outlook 2016<16.0.5565.1000
16.0.5565.1000
Microsoft Outlook 2016<16.0.5565.1000
16.0.5565.1000
Remediation
Event History
Aug 11, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·05:06 PM
Data Sourced
via MITRE·05:06 PM
DescriptionSeverity
Data Sourced
via NVD·05:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-62882?
The severity of CVE-2026-62882 is medium with a score of 4.3.
2
How do I fix CVE-2026-62882?
To fix CVE-2026-62882, apply the available patch to the affected Microsoft Outlook software.
3
What software is affected by CVE-2026-62882?
CVE-2026-62882 affects Microsoft Outlook 2016, Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office 2021, Microsoft Office 2024, and Microsoft Office LTSC 2024.
4
What type of vulnerability is CVE-2026-62882?
CVE-2026-62882 is a spoofing vulnerability resulting from insufficiently protected credentials in Microsoft Outlook.
5
What can an attacker achieve with CVE-2026-62882?
An attacker can perform spoofing over a network by exploiting CVE-2026-62882.