Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 10 Nov 2026.
1.6%
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-124194. Nothing runs until you send it.
Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network.