Outlook@* Security Vulnerabilities and Issues — Outlook@* CVE List

Lucene search

MicrosoftOutlook*

12 matches found

CVE•added 2024/03/12 5:15 p.m.•291 views

CVE-2024-26204

Outlook for Android Information Disclosure Vulnerability

7.5CVSS7.3AI score0.01777EPSS

CVE•added 2024/04/09 5:15 p.m.•202 views

CVE-2024-20670

Outlook for Windows Spoofing Vulnerability

8.1CVSS8AI score0.05117EPSS

CVE•added 2025/04/08 6:16 p.m.•94 views

CVE-2025-29805

Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network.

7.5CVSS6.5AI score0.00078EPSS

CVE•added 2019/07/29 2:15 p.m.•83 views

CVE-2019-1105

A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted email message to a victim.The attacker who successfully exploited this vulnerability...

5.4CVSS5AI score0.00528EPSS

CVE•added 2025/02/11 6:15 p.m.•82 views

CVE-2025-21259

Microsoft Outlook Spoofing Vulnerability

5.3CVSS5.6AI score0.00137EPSS

CVE•added 2025/01/14 6:16 p.m.•70 views

CVE-2025-21361

Microsoft Outlook Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00233EPSS

CVE•added 2002/03/09 5:0 a.m.•65 views

CVE-2001-0538

Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.

10CVSS7.4AI score0.68321EPSS

CVE•added 2000/03/22 5:0 a.m.•62 views

CVE-2000-0216

Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.

5CVSS6.8AI score0.05121EPSS

CVE•added 2000/02/23 5:0 a.m.•49 views

CVE-2000-0160

The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.

7.6CVSS6.9AI score0.10325EPSS

CVE•added 2007/07/27 10:30 p.m.•49 views

CVE-2007-4040

Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command l...

8.8CVSS8.1AI score0.49726EPSS

CVE•added 2024/09/10 5:15 p.m.•49 views

CVE-2024-43482

Microsoft Outlook for iOS Information Disclosure Vulnerability

6.5CVSS6.3AI score0.03842EPSS

CVE•added 2006/12/20 2:28 a.m.•47 views

CVE-2006-6659

The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (Internet Explorer 7 hang) via crafted HTML.

5CVSS6.9AI score0.23702EPSS