Threats tagged 'ghsa-wc4q-w3hr-m2w2'

CVE-2026-70125 is a heap-based buffer overflow vulnerability in Microsoft Office Outlook within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability affects versions 16.0.0 and 16.0.1. It has a high severity score of 7.8 according to CVSS 3.1. An official fix is available from Microsoft, and the vendor manages remediation for this cloud-hosted service. There are no known exploits in the wild at this time.