Microsoft Outlook Spoofing Vulnerability

Severity Moderate  ·  Urgency Immediate  ·  Exploited in the wild

Why it matters: Exploited in the wild — CISA fix-by 2026-11-24

⏰ Remediate by Nov 24, 2026 · in 12d

Spoofing · Moderate · CVSS 6.5 · Exploited in the wild. Affects: Microsoft Office LTSC, Microsoft 365 Apps.

Affected: Microsoft Office LTSC, Microsoft 365 Apps

Related changes

• Microsoft Office Outlook Remote Code Execution Vulnerability · Outlook
• Microsoft Office Word Remote Code Execution Vulnerability · Vulnerability
• Microsoft Office Remote Code Execution Vulnerability · Vulnerability
• Microsoft Office Excel Remote Code Execution Vulnerability · Vulnerability
• Microsoft PowerPoint Remote Code Execution Vulnerability · Vulnerability
• Microsoft Office Access Remote Code Execution Vulnerability · Vulnerability

Change history

View at Microsoft → Copy summary