Microsoft Outlook Spoofing Vulnerability Allowing Unauthorized Network-Based Spoofing

A spoofing vulnerability has been identified in Microsoft Office Outlook. This issue arises from the exposure of sensitive information to unauthorized actors, enabling attackers to perform spoofing over the network. The vulnerability affects multiple Outlook versions, including Outlook 2016 (both 32-bit and 64-bit editions), Outlook LTSC 2021 (32-bit and 64-bit editions), Outlook LTSC 2024 (32-bit and 64-bit editions), and Outlook 2019 (32-bit and 64-bit editions).

Impact

Exploitation of this vulnerability could lead to unauthorized network-based spoofing, allowing attackers to impersonate another user or entity.

Remediation

Users can download the security update for Microsoft Outlook 2016, 2021, and 2024 (both 32-bit and 64-bit editions) from the Microsoft Update Catalog. For Microsoft SharePoint Server 2019 and 2016, security updates are also available through the Microsoft Update Catalog.