A spoofing issue exists in the way Microsoft Outlook for Android parses specifically crafted email messages. This can allow a remote attacker to perform cross-site scripting attacks using a specially crafted email message. The vulnerability is related to errors in the representation of information by the user interface. Exploitation of the vulnerability may enable an attacker to launch a script in the context of the current user.