CVE record · 3 sources
CVE-2026-124194
KEV · due 24 Nov 2026Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
- Vendor
- Microsoft
- Product
- Office
- EPSS
- 0.002 (p14)
- CISA KEV
- added 10 Nov 2026, due 24 Nov 2026 (14d)
- Weakness
- CWE-356
- Exposure class
- Collaboration, Browser
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network.
-
Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
CVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation. The post Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft appeared first on SecurityWeek .
-
Microsoft Patch Tuesday November 2027
Microsoft continues its AI-induced patch surge, addressing 1,260 different vulnerabilities this month. 68 of these vulnerabilities are considered critical. 167 of the vulnerabilities are Chromium issues affecting Microsoft Edge.