The vulnerability of the Microsoft Outlook email client arises from an operation that occurs outside the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of the Microsoft Outlook email client arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information by sending an email containing a linked file...

The vulnerability of the Microsoft Outlook email client, as well as Microsoft Office and Microsoft 365 applications, allows attackers to gain control over programs, access data for viewing, modification, or deletion, and create new accounts with full user rights.

The vulnerability of the Microsoft Outlook email client, as well as Microsoft Office and Microsoft 365 applications, stems from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileges to install...

End of support for Office 2016 and Office 2019

None None...

Attackers Steal Outlook Credentials Via Overlay Screens on Legitimate Sites

Attackers are on the prowl for enterprise Microsoft Outlook credentials, with a new phishing campaign that leverages email-quarantine policies and uses an overlay screen tactic — on top of legitimate company webpages — to lure in victims. The campaign was discovered after successfully targeting a...

Microsoft Outlook Information Disclosure Vulnerability (CNVD-2020-50144)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. An information disclosure vulnerability exists in Microsoft Outlook. An attacker could exploit the vulnerability to access specific files...

QakBot Banking Trojan Returned With New Sneaky Tricks to Steal Your Money

A notorious banking trojan aimed at stealing bank account credentials and other financial information has now come back with new tricks up its sleeve to target government, military, and manufacturing sectors in the US and Europe, according to new research. In an analysis released by Check Point...

CVE-2020-1493

An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an...

CVE-2020-1493

An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an...

CVE-2020-1483

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrativ...

CVE-2020-1483

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrativ...

Information disclosure

An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an...

Remote code execution

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrativ...

CVE-2020-1483 Microsoft Outlook Memory Corruption Vulnerability

...

CVE-2020-1483

CVE-2020-1483 is a Microsoft Outlook remote code execution vulnerability caused by improper handling of in‑memory objects. An attacker could run code with the current user’s privileges; if the user has admin rights, the attacker could take full control of the system. Exploitation requires a user ...

CVE-2020-1493 Microsoft Outlook Information Disclosure Vulnerability

...

CVE-2020-1493

CVE-2020-1493 describes an information-disclosure flaw in Microsoft Outlook where attaching a file as a link can cause the attachment to be accessible to unauthorized recipients when emails are shared. The root cause is how Outlook handles attachment links, enabling exposure beyond the intended p...

CVE-2020-1493 Microsoft Outlook Information Disclosure Vulnerability

...

Microsoft Outlook Code Execution Vulnerability

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Outlook, which arises from the program's failure to properly handle objects in memory. An attacker can exploit the vulnerability by means of a special...

Microsoft Outlook EML Rendering Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Outlook. User interaction is required to exploit this vulnerability in that the target must open a malicious email. The specific flaw exists within the rendering of emails. The issue result...

Microsoft Reveals New Innocent Ways Windows Users Can Get Hacked

Microsoft earlier today released its August 2020 batch of software security updates for all supported versions of its Windows operating systems and other products. This month's Patch Tuesday updates address a total of 120 newly discovered software vulnerabilities, of which 17 are critical, and th...