CVE-2024-26204

CVE-2024-26204 relates to Outlook for Android and is an information-disclosure vulnerability caused by insufficient protection of service data in the Android client. Connected sources describe a remote, network-exploitable issue with high confidentiality impact (CVSS v3.1: 7.5), allowing an attac...

CVE-2024-20670

CVE-2024-20670 affects Outlook for Windows and is described as a spoofing vulnerability in the Outlook client. The vulnerability can be exploited by sending a crafted email that coerces a user to interact, potentially leaking the user’s Net-NTLMv2 credentials and enabling authentication to an att...

CVE-2019-1105

CVE-2019-1105 affects Microsoft Outlook for Android. The vulnerability arises from how the app parses specially crafted email messages, enabling an authenticated attacker to trigger cross-site scripting and run scripts in the security context of the current user. Exploitation is tied to parsing b...

CVE-2025-29805

CVE-2025-29805 affects Outlook for Android and represents an information disclosure vulnerability where an unauthenticated attacker could access sensitive data over the network. Root cause: exposure of sensitive information to an unauthorized actor. CVSSv3.1 base score is 7.5 (HIGH); attack vecto...

CVE-2025-21361

CVE-2025-21361 affects Microsoft Outlook for Mac (and related Outlook/Office deployments). Connected documents indicate a remote code execution vulnerability in Microsoft Outlook for Mac, with impact described as arbitrary code execution and high impact on confidentiality, integrity, and availabi...

CVE-2025-21259

CVE-2025-21259 is a Microsoft Outlook spoofing vulnerability. Affected product: Microsoft Outlook. Underlying issue is spoofing in the Outlook UI. CVSSv3.1 base score is 5.3 (MEDIUM) with Network attack vector, Low attack complexity, no privileges required, no user interaction, and unchanged scop...

CVE-2000-0216

Affected software: Microsoft email clients (Outlook, Exchange, Windows Messaging). Vulnerability: servers/clients automatically respond to Read Receipt and Delivery Receipt tags. Root cause: auto-generated responses to receipt requests, enabling amplification by redirecting to a large distributio...

CVE-2026-26133

CVE-2026-26133 involves an AI command injection vulnerability in Microsoft 365 Copilot that can lead to unauthorized disclosure of information over a network. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) indicates a network-accessible issue with no privileges required but user intera...

CVE-2024-43482

CVE-2024-43482 affects Microsoft Outlook for iOS, described as an information-disclosure vulnerability. The CVSSv3.1 base metrics indicate impact to confidentiality without integrity or availability impact (C:H, I:N, A:N; CVSS 6.5). Public documents in the provided set corroborate that the vulner...

CVE-2007-4040

Technical details for CVE-2007-4040 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2006-6659

CVE-2006-6659 affects the Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2. The vulnerability allows remote attackers to cause a denial of service by presenting crafted HTML, resulting in an Internet Explorer 7 hang. The connected Red Hat and NVD records reiterate ...

CVE-2000-0160

The vulnerability CVE-2000-0160 affects the Microsoft Active Setup ActiveX component used by Internet Explorer 4.x–5.x. A remote attacker can install software components without user prompts by spoofing the software manufacturer's identity as Microsoft. Exploitation details or in-the-wild status ...

CVE-2026-42893

CVE-2026-42893 concerns Improper neutralization of special elements used in a command (command injection) in M365 Copilot, leading to potential tampering over a network. Connected records identify affected software as Microsoft Outlook for iOS and M365 Copilot, with the issue described as command...