3676 matches found
July 1, 2025, update for Outlook 2016 (KB5002747)
None None...
Security Updates for Outlook (July 2025)
The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for...
Microsoft Outlook - Remote Code Execution (RCE)
Titles: Microsoft Outlook - Remote Code Execution RCE Author: nu11secur1ty Date: 07/06/2025 Vendor: Microsoft Software: https://www.microsoft.com/en-us/microsoft-365/outlook/log-in Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47176...
Security Updates for Outlook (June 2025)
The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
VulnCheck KEV: CVE-2025-47176
'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally...
Microsoft Outlook Code Execution Vulnerability (CNVD-2025-23067)
Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A code execution vulnerability exists in Microsoft Outlook, which can be exploited by an attacker to execute arbitrary code on a system...
Microsoft Outlook Code Execution Vulnerability (CNVD-2025-23066)
Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A code execution vulnerability exists in Microsoft Outlook, which can be exploited by an attacker to traverse directories on a system to execute arbitrary code...
CVE-2025-47171
Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally...
CVE-2025-47176
'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and the Microsoft Outlook email client arises from insufficient validation of input data, allowing an attacker to execute arbitrary code.
The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and the Microsoft Outlook email client are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...
Microsoft Outlook 2016 RCE Vulnerability (KB5002683)
This host is missing an important security update according to Microsoft KB5002683 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Office products. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges and execute arbitrary code in the victim's context, potentially gaining access to sensitive data in the victim's context. Successful exploitation...
CVE-2025-47176
'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally...
CVE-2025-47176
'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally...
CVE-2025-47171
Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally...
CVE-2025-47171
Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally...
CVE-2025-47176 Microsoft Outlook Remote Code Execution Vulnerability
...
CVE-2025-47176 Microsoft Outlook Remote Code Execution Vulnerability
...
CVE-2025-47176
CVE-2025-47176 affects Microsoft Outlook. An authorized, low-privilege attacker can exploit a crafted input (described as '.../...//') to trigger local code execution via Outlook’s path handling. Multiple connected sources corroborate Outlook/RCE impact and provide PoCs and advisories; exploitati...
CVE-2025-47171
CVE-2025-47171: Microsoft Outlook (Office) contains a code-execution vulnerability due to improper input validation. The issue affects Outlook components within Microsoft Office and requires an authenticated user with local access and user interaction. CVSS 3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H...