Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

125 records

Vendor: Microsoft Component: Outlook Clear all filters
TI-2026-55342 CVE-2026-80073 · GHSA-rh5r-r8cf-3qp8

Microsoft Office Outlook Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-125
TI-2026-54603 CVE-2026-78519 · GHSA-3pwp-3q27-5xqq

Microsoft Office Outlook Remote Code Execution Vulnerability

Priority MEDIUM 42

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-908
TI-2026-48934 CVE-2026-69629 · GHSA-8rg6-qv6x-mj29

Microsoft Office Outlook Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-122
TI-2026-44943 CVE-2026-62882 · GHSA-mvrg-82pf-2wp2

Microsoft Outlook Spoofing Vulnerability

Priority LOW 21

Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00667 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-522
TI-2026-49147 CVE-2026-70329 · GHSA-25v6-4vqg-8444

Microsoft Outlook Remote Code Execution Vulnerability

Priority MEDIUM 42

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-190
TI-2026-31098 CVE-2026-42893 · GHSA-h35m-vhjw-vqxj

Microsoft Outlook for iOS Tampering Vulnerability

Priority LOW 33

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00399 Published 2026-05-12 Fixed in 5.2617.1 CWE-77
TI-2026-21126 CVE-2026-26133 · GHSA-rjf5-cxrf-4rvw

M365 Copilot Information Disclosure Vulnerability

Priority LOW 32

AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0045 Published 2026-03-13 Fixed in 16.0.19815.10000, 2.107.2 +9 CWE-77
TI-2026-17167 CVE-2026-21260 · GHSA-2pm9-6ww9-wqv9

Microsoft Outlook Spoofing Vulnerability

Priority MEDIUM 42

Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01499 Published 2026-02-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5539.1002 +2 CWE-200
TI-2025-31669 CVE-2025-49699 · GHSA-jrgj-hh7m-7w4f

Microsoft Office Remote Code Execution Vulnerability

Priority LOW 33

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.0038 Published 2025-07-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.99.25071321 +2 CWE-416
TI-2025-29757 CVE-2025-47171 · GHSA-j4v3-52c8-2m66

Microsoft Outlook Remote Code Execution Vulnerability

Priority LOW 35

Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.01762 Published 2025-06-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5504.1000 CWE-20
TI-2025-21213 CVE-2025-29805 · GHSA-vq2r-vj3j-964w

Outlook for Android Information Disclosure Vulnerability

Priority MEDIUM 42

Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01587 Published 2025-04-08 Fixed in 4.2509.0 CWE-200
TI-2025-15227 CVE-2025-21259 · GHSA-47m6-2q4v-m2vx

Microsoft Outlook Spoofing Vulnerability

Priority LOW 32

Microsoft Outlook Spoofing Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01154 Published 2025-02-11 Fixed in 4.2501.1 CWE-451
TI-2025-15324 CVE-2025-21357 · GHSA-99rf-j72j-fqv4

Microsoft Outlook Remote Code Execution Vulnerability

Priority LOW 32

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00587 Published 2025-01-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5483.1000 CWE-908
TI-2024-25457 CVE-2024-38173 · GHSA-7qxv-p6jq-6vf6

Microsoft Outlook Remote Code Execution Vulnerability

Priority LOW 33

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00664 Published 2024-08-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5461.1001 CWE-73
TI-2024-25313 CVE-2024-38020 · GHSA-8wh6-cf3p-j8gx

Microsoft Outlook Spoofing Vulnerability

Priority LOW 33

Microsoft Outlook Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01841 Published 2024-07-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5456.1000 CWE-200
TI-2024-19865 CVE-2024-30103 · GHSA-43r8-23m5-329f

Microsoft Outlook Remote Code Execution Vulnerability

Priority HIGH 73

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03417 Published 2024-06-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5452.1000 CWE-184
TI-2024-13481 CVE-2024-20670 · GHSA-h66x-39x2-5rv8

Outlook for Windows Spoofing Vulnerability

Priority MEDIUM 42

Outlook for Windows Spoofing Vulnerability

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.02309 Published 2024-04-09 Fixed in 1.2023.0322.0100 CWE-20
TI-2024-14138 CVE-2024-21378 · GHSA-qm4q-xhjm-67jr

Microsoft Outlook Remote Code Execution Vulnerability

Priority MEDIUM 53

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.10976 Published 2024-02-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5435.1000 CWE-94
TI-2023-18569 CVE-2023-36763 · GHSA-xcjm-fw7q-2734

Microsoft Outlook Information Disclosure Vulnerability

Priority MEDIUM 43

Microsoft Outlook Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02124 Published 2023-09-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5413.1000 CWE-200
TI-2023-18678 CVE-2023-36893 · GHSA-g53f-59qq-gfh7

Microsoft Outlook Spoofing Vulnerability

Priority LOW 33

Microsoft Outlook Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02191 Published 2023-08-08 Fixed in https://aka.ms/OfficeSecurityReleases, 15.0.5579.1000 +1 CWE-20
Load more