CVE-2026-97749
CriticalCVSS 9.8Summary
Microsoft Office Outlook is affected by a double free vulnerability. This allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute arbitrary code, potentially leading to system compromise and security breach.
Recommendation
Update Microsoft Office Outlook to the latest version and exercise caution when opening messages from unknown senders.
Other vulnerabilities in Microsoft Office Outlook
See all- CVE-2026-97016Critical
Microsoft Office Outlook is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-88156Critical
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70291Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70242Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78509Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-100208High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70125High
Microsoft Office Outlook contains a remote code execution vulnerability. Technical details were not provided in the description.
- CVE-2026-80084Medium
Out-of-bounds read in Microsoft Office Outlook. An unauthorized attacker can disclose information over a network.
- CVE-2026-80073Medium
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
- CVE-2026-78525High
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS