VulnSea

outlook vulnerabilities

CVEs whose affected-version data names the outlook package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

6 CVEsRSS

CVE-2026-80073Medium· 6.5
1mo ago

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · 365_appsEPSS 0.92%via NVD
CVE-2026-78519High· 8.8
1mo ago

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

▾ Twilightmicrosoft · 365_appsEPSS 0.82%via NVD
CVE-2026-69629High· 8.8
1mo ago

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

▾ Twilightmicrosoft · 365_appsEPSS 0.82%via NVD
CVE-2024-30103High· 8.8
2y ago

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

▾ Twilightmicrosoft · 365_appsEPSS 3.4%via NVD
CVE-2023-35311High· 8.8CISA KEV0dayPoC
3y ago

Microsoft Outlook Security Feature Bypass Vulnerability

Microsoft Outlook Security Feature Bypass Vulnerability

▾ Abyssalmicrosoft · 365_appsEPSS 16%via NVD
CVE-2018-0851High· 8.8
8y ago

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, du…

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, du…

▾ Twilightmicrosoft · officeEPSS 19%via NVD
outlook vulnerabilities (CVEs) · VulnSea