// Microsoft 365HIGH
CVE-2026-100208 is a high-severity (CVSS 7.5) integer overflow vulnerability in Microsoft Office Outlook that allows unauthorized attackers to execute code remotely via network-based attack. The flaw requires user interaction and was publicly disclosed on September 25, 2026. Microsoft has issued guidance; no public exploit code has been confirmed, but organizations should prioritize patching to prevent exploitation.
- CVE-2026-100208 PoC, Exploit Status & Vulnerability Details | Th(opens in a new tab)
- CVE-2026-100208: CWE-190: Integer Overflow or Wraparound in Micr(opens in a new tab)
// Get alerts for Microsoft 365