CVE-2026-97749

Summary

Microsoft Outlook contains a double free vulnerability that allows remote attackers to execute arbitrary code on affected systems. This flaw occurs when the application improperly handles memory deallocation, creating opportunities for attackers to corrupt memory and gain control over the application's execution flow.

Exploitability

Exploitation is moderately difficult as it requires a remote attacker to craft a malicious Office document that triggers the double free condition, but once triggered, the vulnerability can be exploited without user interaction.

Blast radius

The impact could be significant as Outlook is widely used across organizations, and successful exploitation could allow attackers to execute code on user workstations with the privileges of the Outlook process, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office update KB5042738 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.