CVE-2026-124228

CVSS 8.8 (high) · published 2026-11-10

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authorized attacker to execute code over a network.

Weakness: CWE-22

Source: NVD CVE-2026-124228

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.