Occurred
First published · Last updated
CVE-2026-124194: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
Reported by CISA Known Exploited Vulnerabilities
The source describes a Microsoft Office Outlook vulnerability that allows an unauthorized attacker to perform spoofing over a network. It calls for applying vendor mitigations and following applicable CISA patching guidance.
Share this event
Follow: Events in United States
Why it matters
Stakeholders are directed to mitigate the vulnerability or discontinue use if mitigations are unavailable.
Generated scores
Scores are based on the cited reporting and use a 1–10 scale. Read the methodology.
- Confidence
- 6/10
- Geographic reach
- 1/10
- Global importance
- 2/10
- Impact magnitude
- 3/10
- Urgency
- 5/10
Primary official sources
- CISA Known Exploited VulnerabilitiesCVE-2026-124194: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
Read our editorial process and corrections policy.
Continue exploring
Related developments reported in the last 30 days. These are not necessarily ongoing incidents.
Loading related developments…
Explore events in united states
