Reported 80ExploitedPatch availableFirst seen 10 Nov 2026, 19:19 UTC

Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

Coverage

Headline	Source	Type	Published
Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft	SecurityWeek	Security press	10 Nov 2026, 19:19 UTC

Vulnerabilities and remediation

CVE-2026-124194 Patch availableExploited (CISA KEV) CVSS pending

Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Fixed in: Microsoft Office LTSC 2021 16.0.14334.21048 Microsoft Office LTSC 2024 16.0.17932.21140
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for… Due 24 Nov 2026 (US federal deadline)
Your version: Check if your Microsoft 365 Apps for Enterprise version is affected →
Checked: Vendor record (microsoft) checked 4 h ago

Fix status, versions and advisories from NVD; required actions from CISA. EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days. Always confirm with the vendor advisory.

Why this score

Confidence	80 · Reported
Most trusted source	70
Independent organisations reporting it (1)	+0
Confirmed by an official source or CISA KEV	+10

We link to the original reporting and don’t reproduce it. Read the sources above for the full details.