Content We're investigating the issue and will update this page when a fix is available. MAPI does not validate that a provider's DLL that it is requested to load is registered correctly in MapiSVC.inf or even that it comes from the local machine. This can be exploited by creating a file together with an OLE object in such a way to cause MAPI to load a DLL from a network share when the OLE object is activated. If you're using Outlook 2010, Outlook 2013 or Outlook 2016, uninstall and re-in...

Content We're investigating the issue and will update this page when a fix is available. MAPI does not validate that a provider's DLL that it is requested to load is registered correctly in MapiSVC.inf or even that it comes from the local machine. This can be exploited by creating a file together with an OLE object in such a way to cause MAPI to load a DLL from a network share when the OLE object is activated. If you're using Outlook 2010, Outlook 2013 or Outlook 2016, uninstall and re-in...