outlook_web vulnerabilities

CVEs whose affected-version data names the outlook_web package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-96951High· 8.8CISA KEV0dayPoC

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

▾ Abyssalmicrosoft · outlook_webEPSS 9.8%via NVD

outlook_web vulnerabilities (CVEs) · VulnSea