CVE-2026-124194: Microsoft Office Outlook Missing User Interaction for
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability. Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network.
- CISA KEV-listed (remediation due 2026-11-24)
- EPSS 1.6% (76.4% percentile)
- CVSS 6.5 medium