| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-97016 | Microsoft Office Outlook Remote Code Execution Vulnerability | Microsoft Office, Microsoft 365 | Critical | 03-11-2026 |
Technical Information
An unauthenticated attacker can exploit a heap-based buffer overflow by sending a specially crafted email to a target user, achieving remote code execution when the email is displayed in the Reading Pane, without requiring authentication or any user interaction.
Patch release date: Oct 13, 2026
Further information on this vulnerability is available at : CVE-2026-97016
Affected Software
Microsoft Office LTSC 2021 for 64-bit editions,Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office LTSC 2024 for 64-bit editions,
Microsoft Office LTSC 2024 for 32-bit editions,
Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft 365 Apps for Enterprise for 32-bit Systems