CVE-2026-123382
Awaiting Analysis
Awaiting Analysis - Queue
Untrusted Pointer Dereference in Microsoft Office Outlook
Vulnerability report for CVE-2026-123382, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-10
Last updated on: 2026-11-10
Assigner: Microsoft Corporation
Description
Description
Untrusted pointer dereference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Microsoft | Microsoft Office LTSC 2021 | From 16.0.1 (inc) to 16.0.14334.21048 (exc) |
| Microsoft | Microsoft Office LTSC 2024 | From 16.0.0 (inc) to 16.0.17932.21140 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-822 | The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer. |
