Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 5 products
CVE-2026-21260 Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. https://www.cve.org/CVERecord?id=CVE-2026-21260
Post summary
The post references CVE‑2026‑21260, outlining a sensitive‑information exposure that permits spoofing in Microsoft Outlook, yet it lacks any PoC, exploit code, or patch details.
13 of 13 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_apps | - | - | x64 |
| App | microsoft | 365_apps | - | - | x86 |
| App | microsoft | office | 2019 | - | x64 |
| App | microsoft | office | 2019 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x86 |
| App | microsoft | outlook | 2016 | - | x64 |
| App | microsoft | outlook | 2016 | - | x86 |
| App | microsoft | sharepoint_server | - | - | - |
| App | microsoft | sharepoint_server | 2016 | - | - |
| App | microsoft | sharepoint_server | 2019 | - | - |