3676 matches found
Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection
Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter. id: CVE-2008-1547 info: name:...
HCL Traveler for Microsoft Outlook < 3.0.16 DLL Hijacking (CVE-2026-21770)
The version of HCL Traveler for Microsoft Outlook HTMO installed on the remote host is prior to 3.0.16. It is, therefore, affected by a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content. Note that Nessus has not tested for this...
EUVD-2026-47461
Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite component: Outlook Sync Win 32. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales for...
CVE-2026-61280
Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite component: Outlook Sync Win 32. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales for...
New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery
Introduction In June 2026, as part of our Kaspersky Threat Intelligence Reporting service, we published extensive research on Project CAV3RN, a sophisticated modular framework used for cyberespionage activity against targets in Israel. We have been tracking this cluster since December 2025, and i...
CVE-2026-21770
HCL Traveler for Microsoft Outlook HTMO is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content...
CVE-2026-21770
CVE-2026-21770 affects HCL Traveler for Microsoft Outlook (HTMO). The vulnerability is described as a DLL hijacking issue that could allow an attacker to modify or replace HTMO with malicious content. Per the provided metrics, exploitability is Local with LOW complexity, but HIGH privileges are r...
CVE-2026-21770
HCL Traveler for Microsoft Outlook HTMO is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content...
EUVD-2026-45141
HCL Traveler for Microsoft Outlook HTMO is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content...
Vulnerabilities in Microsoft Exchange
Microsoft has addressed vulnerabilities in Exchange, both Online and on-premise versions. A malicious individual could exploit these vulnerabilities to impersonate other users, gain elevated privileges, execute arbitrary code, and thereby access sensitive data. The vulnerability in Exchange Onlin...
CVE-2026-55145
Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...
CVE-2026-55145 Outlook Copilot Tampering Vulnerability
...
CVE-2026-55145
The CVE-2026-55145 entry concerns Outlook Copilot and describes improper neutralization of special elements used in a command (command injection) that could allow an authorized attacker to tamper over a network. Connected sources corroborate with MSRC and NVD summaries and indicate exploitation s...
CVE-2026-55145 Outlook Copilot Tampering Vulnerability
...
Outlook Copilot Tampering Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...
KLA91149 Multiple vulnerabilities in Microsoft Copilot Plugin
Multiple vulnerabilities were found in Microsoft Copilot Plugin. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in GitHub Copilot...
HCL Traveler for Microsoft Outlook < 3.0.15 Sensitive Data Exposure (CVE-2025-59868)
The version of HCL Traveler for Microsoft Outlook installed on the remote Windows host is prior to 3.0.15. It is, therefore, affected by a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown...
CVE-2025-59868
HCL Traveler for Microsoft Outlook HTMO is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown behavior in the application...
CVE-2025-59868
HCL Traveler for Microsoft Outlook HTMO is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown behavior in the application...