When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Microsoft urges users to immediately patch an actively exploited vulnerability in Outlook
Microsoft has issued an urgent warning regarding an actively exploited security flaw in Outlook. Designated as CVE-2026-124194, the vulnerability enables attackers to trick users into opening a tampered message file. When opened, Outlook may connect to a server controlled by the attacker without displaying the usual security warning. This puts the user’s authentication credentials at risk of being leaked, which could lead to potential impersonation.
Although Microsoft classifies the vulnerability as moderately severe, we recommend installing the latest security updates,
