{"id":"EUVD-2026-122310","enisaUuid":"6fc07f3c-f134-30b6-8b70-8fcbb1332e1d","description":"Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.","datePublished":"Nov 10, 2026, 6:22:22 PM","dateUpdated":"Nov 12, 2026, 3:47:25 PM","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194\n","aliases":"CVE-2026-124194\nGHSA-69hg-ppjj-gg27\n","assigner":"microsoft","epss":1.62,"exploitedSince":"Nov 10, 2026, 12:00:00 AM","enisaIdProduct":[{"id":"0700f925-b001-3973-bd2e-8d1176e1453c","product":{"name":"Microsoft Office LTSC 2021","vendor":{"name":"Microsoft"}},"product_version":"16.0.1 \u003c16.0.14334.21048"},{"id":"d23a154b-81c8-3e24-b471-694497e6908f","product":{"name":"Microsoft 365 Apps for Enterprise","vendor":{"name":"Microsoft"}},"product_version":"16.0.1 \u003chttps://aka.ms/OfficeSecurityReleases"},{"id":"f951c7e3-0d4d-33cf-909e-d608ee37f601","product":{"name":"Microsoft Office LTSC 2024","vendor":{"name":"Microsoft"}},"product_version":"16.0.0 \u003c16.0.17932.21140"}],"enisaIdVendor":[{"id":"e56e62dc-97e1-31e8-a335-12dd5ef197c3","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"811cff4a-0dbe-3303-a3d5-6895934d4b76","vulnerability":{"id":"CVE-2026-124194","description":"Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.","datePublished":"Nov 10, 2026, 6:22:22 PM","dateUpdated":"Nov 12, 2026, 3:47:25 PM","status":"PUBLISHED","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194\n","enisa_id":"EUVD-2026-122310\n","assigner":"microsoft","epss":1.62,"dataProcessed":"Nov 12, 2026, 10:00:54 PM","exploitedSince":"Nov 10, 2026, 12:00:00 AM","vulnerabilityProduct":[{"id":"27af1874-e8f9-34a1-873b-0701e5e3ab5e","product":{"name":"Microsoft 365 Apps for Enterprise","vendor":{"name":"Microsoft"}},"product_version":"16.0.1 \u003chttps://aka.ms/OfficeSecurityReleases"},{"id":"47c71a56-5a8a-3807-8cf5-e4fb01ca8945","product":{"name":"Microsoft Office LTSC 2024","vendor":{"name":"Microsoft"}},"product_version":"16.0.0 \u003c16.0.17932.21140"},{"id":"6f1afb49-7def-3651-99af-9e85da0db7fe","product":{"name":"Microsoft Office LTSC 2021","vendor":{"name":"Microsoft"}},"product_version":"16.0.1 \u003c16.0.14334.21048"}],"vulnerabilityVendor":[{"id":"3f9ebde6-acc1-3b12-be6a-350021a61bd7","vendor":{"name":"Microsoft"}}]}},{"id":"cc333d9b-f2d4-3bb6-aed8-ff5e9cd60657","vulnerability":{"id":"GHSA-69hg-ppjj-gg27","description":"Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.","datePublished":"Nov 10, 2026, 9:33:51 PM","dateUpdated":"Nov 10, 2026, 9:33:51 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-124194\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve\u003dCVE-2026-124194\n","enisa_id":"EUVD-2026-122310\n","aliases":"CVE-2026-124194\nGHSA-69hg-ppjj-gg27\n","epss":0.0,"dataProcessed":"Nov 12, 2026, 10:01:47 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}