Medium severity6.5CISA KEVNVD Advisory· Published Nov 10, 2026· Updated Nov 10, 2026
CVE-2026-124194
CVE-2026-124194
Description
Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
5- Exploited Outlook Zero-Day Among 1,094 Flaws Patched by MicrosoftSecurityWeek · Nov 10, 2026
- Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th)SANS Internet Storm Center · Nov 10, 2026
- Microsoft November 2026 Patch Tuesday Fixes 1,093 Vulnerabilities, Including Outlook Zero-DayCyber Security News · Nov 10, 2026
- Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)Tenable Blog · Nov 10, 2026
- CISA Adds Six Known Exploited Vulnerabilities to CatalogCISA Alerts