CVE-2026-124194 — Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

Este es el aviso número 434 sobre productos Microsoft en pwned.cl.

CVE	CVE-2026-124194
Severidad	CRITICAL
CVSS	6.5 / 10
CWE	CWE-356
CISA KEV	Explotación activa confirmada
Exposición (Shodan)	sin hosts expuestos detectados actualmente
PoC público	github.com