CVE record · 3 sources
CVE-2026-111309
CVSS 8.8Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- Vendor
- Microsoft
- Product
- Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024
- CVSS v3.1
- 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weakness
- CWE-763
- Exposure class
- Collaboration, Endpoint security
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for November 2026, which includes 1328 vulnerabilities affecting a range of products, including 60 that Microsoft marked as "critical." Out of 60 "critical" vulnerabilities, 45…
-
Microsoft Patch Tuesday, November 2026 Security Update Review
As the year approaches its final stretch, Microsoft’s November 2026 Patch Tuesday highlights the continued importance of proactive vulnerability management. This month’s security updates address vulnerabilities across the…