What is the CVSS score of EUVD-2026-29716?

EUVD-2026-29716 has a CVSS 3.1 base score of 7.4 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for EUVD-2026-29716?

Yes, a patch is available for EUVD-2026-29716. Update the affected software to the latest version immediately.

Microsoft Outlook For Ios EUVD-2026-29716

| CVE-2026-42893 HIGH

Command Injection (CWE-77)

2026-05-12 microsoft

GHSA-h35m-vhjw-vqxj

Command Injection Microsoft Outlook For Ios

7.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

ENISA EUVD

HIGH

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

May 12, 2026 - 16:59 nvd

HIGH 7.4

DescriptionCVE.org

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.

Analysis

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.