{
  "cveId": "CVE-2017-0207",
  "url": "https://patchblox.com/security/cve/CVE-2017-0207",
  "summary": "CVE-2017-0207 is fixed in Microsoft Outlook for Mac 2011 on 1 platform by KB3212218 (version ), released April 11, 2017. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Microsoft Outlook Spoofing Vulnerability",
  "description": "\u003Cp\u003EA spoofing vulnerability exists in when Microsoft Outlook for Mac improperly validates HTML tag input. An attacker who successfully tricked the user could gain access to the user\u0027s authentication information or login credentials.\u003C/p\u003E\n\u003Cp\u003EIn an email attack scenario an attacker could exploit the vulnerability by sending an email with specific HTML tags, that could display a malicious authentication prompt.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by correcting how Outlook for Mac sanitizes HTML tags.\u003C/p\u003E",
  "published": "2017-04-11T07:00:00Z",
  "severity": "Moderate",
  "epss": 0.10485,
  "epssPercentile": 0.9578,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Unlikely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0207",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft Outlook for Mac 2011",
      "fixedVersion": "",
      "fix": "KB3212218",
      "url": "https://patchblox.com/security/fix/microsoft/kb3212218",
      "released": "2017-04-11T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}