{"id":"EM-20261110-Y15M","url":"https://cyber.eventmonitor.net/incident/EM-20261110-Y15M/cve-2026-124194-microsoft-office-outlook-missing-user-interaction/","type":"cve","title":"Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability","subtitle":"CVE-2026-124194","subject":"CVE-2026-124194","status":"Confirmed","severity":"high","affected":["Microsoft Office"],"headline":"0 hours from first report to confirmed exploitation.","born":"2026-11-10T19:19:46.000Z","firstSignal":"2026-11-10T12:00:00.000Z","lastSignal":"2026-11-10T19:19:46.000Z","updated":"2026-11-10T20:23:48.430Z","revision":2,"life":[{"status":"Born","at":"2026-11-10T19:19:46.000Z","why":"second independent source: C129 SecurityWeek"},{"status":"Developing","at":"2026-11-10T19:19:46.000Z","why":"signals keep joining"},{"status":"Confirmed","at":"2026-11-10T12:00:00.000Z","why":"CISA added it to Known Exploited Vulnerabilities"}],"changeLog":[{"at":"2026-11-10T12:00:00.000Z","what":"First signal: C1 CISA Known Exploited Vulnerabilities"},{"at":"2026-11-10T12:00:00.000Z","what":"Status: Confirmed (CISA added it to Known Exploited Vulnerabilities)"},{"at":"2026-11-10T19:19:46.000Z","what":"Born: second source, C129 SecurityWeek. Page EM-20261110-Y15M created."}],"stages":[{"name":"Disclosed","at":"2026-11-10T19:20:48.180Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-10T19:20:48.180Z","detail":"CVSS 6.5"},{"name":"Exploited","at":"2026-11-10T12:00:00.000Z","detail":"C1 CISA KEV, fix by 2026-11-24"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"When fixed: KEV deadline 2026-11-24, then 14 quiet days"}],"signals":[{"at":"2026-11-10T12:00:00.000Z","source":"C1","sourceName":"CISA Known Exploited Vulnerabilities","role":"Exploited List","severity":3,"title":"CVE-2026-124194 added to KEV: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability","text":"Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"},{"at":"2026-11-10T19:19:46.000Z","source":"C129","sourceName":"SecurityWeek","role":"Research & News","severity":2,"title":"Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft","text":"CVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation. The post Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft appeared first on SecurityWeek .","url":"https://www.securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft/"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-10T19:20:48.180","score":6.5,"severity":"MEDIUM","desc":"Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.","product":"","seen":1794342228430},"kev":{"added":"2026-11-10","due":"2026-11-24","ransomware":"Unknown","vendor":"Microsoft","product":"Office","name":"Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability"},"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}