CVE-2023-33131

CVE-2023-33131 is a Microsoft Outlook remote code execution vulnerability. Connected sources confirm affected product is Outlook (Office family) and describe exploitation via a malicious Word file delivered to Outlook users, with the exploit code example showing an AutoOpen macro invoking cmd.exe...

CVE-2018-8522

CVE-2018-8522 is a remote code execution in Microsoft Outlook where the vulnerability arises from improper handling of objects in memory, allowing an attacker to run code with the current user’s privileges when a specially crafted file is processed. CVE-2018-8582 is another Outlook RCE triggered ...

CVE-2018-8582

CVE-2018-8582 is a remote code execution flaw in Microsoft Outlook that arises when parsing specially crafted rule export files. The underlying issue is in Outlook’s handling of objects during parsing, allowing an attacker to execute arbitrary code on the affected system. A successful exploit cou...

CVE-2018-8244

CVE-2018-8244 is an elevation-of-privilege vulnerability in Microsoft Outlook (Office) where attachment headers are not properly validated. Exploitation could occur when a user opens or processes a crafted attachment, enabling local privilege escalation. Public details specify affected products a...

CVE-2018-8524

CVE-2018-8524 is an Outlook remote code execution vulnerability affecting Office 365 ProPlus, Microsoft Office, and Microsoft Outlook. The weakness stems from improper handling of in-memory objects, enabling an attacker to execute arbitrary code via a specially crafted file or input, with the att...

CVE-2016-3278

CVE-2016-3278 is a memory corruption vulnerability in Microsoft Outlook (Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016) triggered by processing a specially crafted Office document. The root cause is a memory corruption flaw exploited via a crafted document, enabling remote code execution on a...