{"id":"CVE-2026-123375","kind":"vulnerability","aliases":["CVE-2026-123375"],"related":[],"title":"Microsoft Outlook: stack buffer overflow lets remote attacker run code","description":"Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","summary":"A stack-based buffer overflow in Microsoft Office Outlook lets an unauthorized attacker reach the network and run code on the affected machine. NVD rates it high (CVSS 8.8), and the sources do not say whether it is exploited in the wild.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Microsoft Office Outlook","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["microsoft-office","other","outlook","windows"],"not_affected_if":[],"how_to_check":"- Open Outlook and check the installed build under File > Office Account (unknown if the sources name a specific build)","fix":null,"status":"open","published_at":"2026-11-10T19:20:40+00:00","first_seen_at":"2026-11-10T19:25:11+00:00","triaged_at":"2026-11-10T19:27:43+00:00","updated_at":"2026-11-10T19:27:43+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T19:27:43Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft Outlook: stack buffer overflow lets remote attacker run code","impact":"high","summary":"A stack-based buffer overflow in Microsoft Office Outlook lets an unauthorized attacker reach the network and run code on the affected machine. NVD rates it high (CVSS 8.8), and the sources do not say whether it is exploited in the wild.","audience":"businesses","category":"other","nicknames":[],"who_cares":["outlook","microsoft-office","windows"],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"code runs on the machine via a crafted network request","analyst_note":"Find the affected Outlook builds, the fixed update and whether a preview pane or message open is needed, from the MSRC advisory for CVE-2026-123375.","how_to_check":"- Open Outlook and check the installed build under File > Office Account (unknown if the sources name a specific build)\n- unknown for any other check, since the sources do not say which builds are affected","plain_action":"","product_name":"Microsoft Office Outlook","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000683,"input_tokens":4498,"output_tokens":467,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the affected Outlook builds, the fixed update and whether a preview pane or message open is needed, from the MSRC advisory for CVE-2026-123375.","search":"'-123375':13A,16A '-2026':12A,15A '8.8':55B 'affect':48B 'allow':78C 'attack':8A,39B,81C 'base':29B,71C 'buffer':4A,30B,72C 'code':10A,45B,84C 'cve':11A,14A 'cvss':54B 'execut':83C 'exploit':65B 'high':53B 'let':6A,36B 'machin':49B 'microsoft':1A,17A,21B,33B,75C 'microsoft-offic':20B 'network':42B,87C 'nvd':50B 'offic':22B,34B,76C 'office':18A 'outlook':2A,19A,24B,35B,77C 'overflow':5A,31B,73C 'rate':51B 'reach':40B 'remot':7A 'run':9A,44B 'say':61B 'sourc':58B 'stack':3A,28B,70C 'stack-bas':27B,69C 'unauthor':38B,80C 'whether':62B 'wild':68B 'window':25B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["microsoftofficeoutlook","officeoutlook"],"ptokens":["microsoft","office","outlook"],"labels":["high","microsoftoffice","other","outlook","vendor","windows"],"campaign_type":null,"search_a":"'-123375':13A,16A '-2026':12A,15A 'attack':8A 'buffer':4A 'code':10A 'cve':11A,14A 'let':6A 'microsoft':1A,17A 'office':18A 'outlook':2A,19A 'overflow':5A 'remot':7A 'run':9A 'stack':3A","search_b":"'8.8':55B 'affect':48B 'attack':39B 'base':29B 'buffer':30B 'code':45B 'cvss':54B 'exploit':65B 'high':53B 'let':36B 'machin':49B 'microsoft':21B,33B 'microsoft-offic':20B 'network':42B 'nvd':50B 'offic':22B,34B 'outlook':24B,35B 'overflow':31B 'rate':51B 'reach':40B 'run':44B 'say':61B 'sourc':58B 'stack':28B 'stack-bas':27B 'unauthor':38B 'whether':62B 'wild':68B 'window':25B","search_c":"'allow':78C 'attack':81C 'base':71C 'buffer':72C 'code':84C 'execut':83C 'microsoft':75C 'network':87C 'offic':76C 'outlook':77C 'overflow':73C 'stack':70C 'stack-bas':69C 'unauthor':80C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:40+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123375","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123375","severity":null,"published_at":"2026-11-10T19:20:40+00:00","modified_at":"2026-11-10T19:20:40+00:00","first_seen_at":"2026-11-10T19:25:11+00:00","fetched_at":"2026-11-10T19:25:11+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}