Skip to content
fr Sign in
7.5 High

CVE-2026-21511 Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a…

Description

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

Affected products and versions

Product Affected versions Fixed in
Microsoft SharePoint Enterprise Server 2016 16.0 16.0.0 → < 16.0.5539.1002 16.0.5539.1002
Microsoft SharePoint Server 2019 16.0 16.0.0 → < 16.0.10417.20097 16.0.10417.20097
Microsoft Office 2019 19.0 19.0.0 → latest No fix stated
Microsoft 365 Apps for Enterprise 16.0 16.0.1 → latest No fix stated
Microsoft Office LTSC for Mac 2021 16.0 16.0.1 → < 16.106.26020821 16.106.26020821
Microsoft Office LTSC 2021 16.0 16.0.1 → latest No fix stated
Microsoft SharePoint Server Subscription Edition 16.0 16.0.0 → < 16.0.19127.20518 16.0.19127.20518
Microsoft Office LTSC 2024 16.0 16.0.0 → latest No fix stated
Microsoft Office LTSC for Mac 2024 16.0 16.0.0 → < 16.106.26020821 16.106.26020821
Show the other branch
Product Affected versions Fixed in
Microsoft Word 2016 16.0 16.0.1 → < 16.0.5539.1002 16.0.5539.1002

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft SharePoint Enterprise Server 2016

The 337 CVEs of Microsoft SharePoint Enterprise Server 2016 →
CVE-2026-97783 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 8.1 High CVE-2026-69943 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows… 8.8 High CVE-2026-62917 Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a… 4.6 Medium CVE-2026-62839 Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing… 6.5 Medium
Track this CVE