Product:

Outlook

(Microsoft)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 116
Date Id Summary Products Score Patch Annotated
2023-09-12 CVE-2023-36763 Microsoft Outlook Information Disclosure Vulnerability 365_apps, Office, Office_long_term_servicing_channel, Outlook N/A
2024-02-13 CVE-2024-21378 Microsoft Outlook Remote Code Execution Vulnerability 365_apps, Office, Office_long_term_servicing_channel, Outlook N/A
2024-06-11 CVE-2024-30103 Microsoft Outlook Remote Code Execution Vulnerability 365_apps, Office, Outlook N/A
2024-07-09 CVE-2024-38020 Microsoft Outlook Spoofing Vulnerability 365_apps, Office, Office_long_term_servicing_channel, Outlook N/A
2024-10-08 CVE-2024-43604 Outlook for Android Elevation of Privilege Vulnerability Outlook 8.0
2024-09-10 CVE-2024-43482 Microsoft Outlook for iOS Information Disclosure Vulnerability Outlook 6.5
2024-08-13 CVE-2024-38173 Microsoft Outlook Remote Code Execution Vulnerability 365_apps, Office, Office_long_term_servicing_channel, Outlook 6.7
2018-05-16 CVE-2017-17688 The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification Mail, Airmail, Emclient, Maildroid, Mailmate, Horde_imp, Outlook, Thunderbird, Postbox, R2mail2, Webmail 5.9
2019-08-14 CVE-2019-1204 An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages. An attacker who successfully exploited the vulnerability could attempt to force Outlook to load a local or remote message store (over SMB). To exploit the vulnerability, the attacker could send a specially crafted email to a victim. Outlook would then attempt to open a pre-configured message store contained in the... Office, Office_365_proplus, Outlook 4.3
2019-08-14 CVE-2019-1200 A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user. To exploit the vulnerability, a user must open a specially crafted file with an affected... Office, Office_365_proplus, Outlook 7.8