Description
Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Microsoft 365 Apps for Enterprise
16.0.1 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office 2019
19.0.0 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office LTSC 2021
16.0.1 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office LTSC 2024
16.0.0 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office LTSC for Mac 2021
16.0.1 to < 16.106.26020821affected
Microsoft Microsoft Office LTSC for Mac 2024
16.0.0 to < 16.106.26020821affected
Microsoft Microsoft SharePoint Enterprise Server 2016
16.0.0 to < 16.0.5539.1002affected
Microsoft Microsoft SharePoint Server 2019
16.0.0 to < 16.0.10417.20097affected
Microsoft Microsoft SharePoint Server Subscription Edition
16.0.0 to < 16.0.19127.20518affected
Microsoft Microsoft Word 2016
16.0.1 to < 16.0.5539.1002affected