Microsoft Outlook Vulnerability Allows Attackers to Execute Malicious Code Remotely

Microsoft has disclosed a new remote code execution flaw in Outlook, tracked as CVE-2026-70329, as part of its August 2026 Patch Tuesday rollout. The vulnerability stems from an integer overflow or wraparound weakness in Microsoft Office Outlook, and it carries a CVSS v3.1 base score of 8.8, placing it in the High severity band. Microsoft’s advisory notes that an unauthorized attacker could exploit this flaw to execute arbitrary code over a network, making it a priority patch for organizations running any supported version of Outlook or Office. According to Microsoft’s Security Response Center, the flaw has not been publicly disclosed prior to this release, and there is no evidence of active exploitation in the...

Read the full article at the source.