Microsoft just patched a serious Outlook flaw. Time to update!

Summary

Microsoft has issued an urgent warning regarding an actively exploited security flaw in Outlook. Designated as CVE-2026-124194 , the vulnerability enables attackers to trick users into opening a tampered message file. When opened, Outlook may connect to a server controlled by the attacker without displaying the usual security warning. This puts the user’s authentication credentials at risk of being leaked, which could lead to potential impersonation. Although Microsoft classifies the vulnerability as moderately severe, we recommend installing the latest security updates, as active…

Description from Pcworld.