# CVE-2017-0207: Microsoft Outlook Spoofing Vulnerability

CVE-2017-0207 is fixed in Microsoft Outlook for Mac 2011 on 1 platform by KB3212218 (version ), released April 11, 2017. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2017-0207
- Priority: Routine
- CVSS: n/a (Moderate)
- EPSS: 0.1049
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Vendor exploitability assessment: Exploitation Unlikely
- Published: Apr 11, 2017
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0207

## Description

<p>A spoofing vulnerability exists in when Microsoft Outlook for Mac improperly validates HTML tag input. An attacker who successfully tricked the user could gain access to the user's authentication information or login credentials.</p> <p>In an email attack scenario an attacker could exploit the vulnerability by sending an email with specific HTML tags, that could display a malicious authentication prompt.</p> <p>The security update addresses the vulnerability by correcting how Outlook for Mac sanitizes HTML tags.</p>

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Microsoft | Microsoft Outlook for Mac 2011 |  | [KB3212218](https://patchblox.com/security/data/fix/microsoft/kb3212218.md) | Apr 11, 2017 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo