CVE-2026-124194
MEDIUM
Actively Exploited
microsoft
365_apps, office_2021, office_2024
NVDCISA KEV
CVSS Score
6.5
Severity
MEDIUM
Published
Nov 10, 2026
Vendor
microsoft
This vulnerability is in the CISA Known Exploited Vulnerabilities Catalog. Active exploitation has been observed. Immediate patching is recommended.
Description
Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.