Description

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

Remediation

References

CVE-2026-21511

Related Vulnerabilities

WordPress Plugin WP Database Backup Cross-Site Scripting (5.1.1)

Jetty Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-5047)

Liferay DXP Observable Discrepancy Vulnerability (CVE-2025-43786)

WordPress Plugin Weather for us-animated weather widget Crypto Mining (1.8)

WordPress Plugin User Registration-Custom Registration Form, Login Form, and User Profile Privilege Escalation (3.2.0.1)

Severity

High

Classification

CVE-2026-21511 CWE-502 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities