[ CVE-2026-70125 · Published 23 Sep 2026 ]
Vulnerability in Microsoft 365 Apps for Enterprise
CVSS 8.8
EPSS <1%2 agency advisoriesFix available
[ Description ]Official description
Microsoft Office Outlook Remote Code Execution Vulnerability
[ Fixes ]Fixes and patches
- Security bulletin: Microsoft Office CVE-2026-70125Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70125, cited by CERT-FR CERTFR-2026-AVI-1224
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1224
Vulnerability in Microsoft Office Translated from French
A vulnerability has been discovered in Microsoft Office. It allows an attacker to cause remote arbitrary code execution.
-
BSI CERT-BundWID-SEC-2026-3542
Microsoft Outlook: Vulnerability allows code execution Translated from German
[ References ]References
- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70125PatchVendor Advisory