"Microsoft Outlook Vulnerabilities Spark Urgent Updates and Concerns"

A critical vulnerability in Microsoft Outlook, rated 9.8 out of 10, has been exploited in the wild by a Russia-based threat actor. The exploit is triggered upon receipt of a malicious email and is executed before the email is read in the preview pane, requiring no user interaction. All currently supported versions of Outlook for Windows are impacted, but not Outlook for the web or those running on Android, iOS, or Mac. Microsoft has released a patch and published workaround mitigations, but multiple proofs-of-concept are now widely available, and the potential for harm is high.