Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Outlook
Total 121 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-17119 1 Microsoft 3 365 Apps, Office, Outlook 2025-08-28 5.0 MEDIUM 6.5 MEDIUM
Microsoft Outlook Information Disclosure Vulnerability
CVE-2024-42220 1 Microsoft 1 Outlook 2025-08-22 N/A 7.1 HIGH
A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVE-2025-49699 1 Microsoft 6 365 Apps, Office, Office Long Term Servicing Channel and 3 more 2025-07-15 N/A 7.0 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-29805 1 Microsoft 1 Outlook 2025-07-10 N/A 7.5 HIGH
Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network.
CVE-2025-47171 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-07-09 N/A 6.7 MEDIUM
Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.
CVE-2025-21357 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-07-01 N/A 6.7 MEDIUM
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2019-1105 1 Microsoft 1 Outlook 2025-05-20 3.5 LOW 5.4 MEDIUM
A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted email message to a victim. The attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on the affected systems and run scripts in the security context of the current user. The security update addresses the vulnerability by correcting how Outlook for Android parses specially crafted email messages.
CVE-2023-33131 1 Microsoft 4 Office, Office Long Term Servicing Channel, Outlook and 1 more 2025-02-28 N/A 8.8 HIGH
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2021-31949 1 Microsoft 3 365 Apps, Office, Outlook 2025-02-28 6.8 MEDIUM 7.3 HIGH
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2025-21259 1 Microsoft 1 Outlook 2025-02-28 N/A 5.3 MEDIUM
Microsoft Outlook Spoofing Vulnerability
CVE-2024-26204 1 Microsoft 1 Outlook 2025-01-15 N/A 7.5 HIGH
Outlook for Android Information Disclosure Vulnerability
CVE-2024-20670 1 Microsoft 2 Outlook, Windows 2025-01-08 N/A 8.1 HIGH
Outlook for Windows Spoofing Vulnerability
CVE-2022-24480 1 Microsoft 1 Outlook 2025-01-02 N/A 6.3 MEDIUM
Outlook for Android Elevation of Privilege Vulnerability
CVE-2024-38020 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2024-11-21 N/A 6.5 MEDIUM
Microsoft Outlook Spoofing Vulnerability
CVE-2024-21378 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2024-11-21 N/A 8.8 HIGH
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-36893 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2024-11-21 N/A 6.5 MEDIUM
Microsoft Outlook Spoofing Vulnerability
CVE-2023-36763 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2024-11-21 N/A 7.5 HIGH
Microsoft Outlook Information Disclosure Vulnerability
CVE-2022-35742 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2024-11-21 N/A 7.5 HIGH
Microsoft Outlook Denial of Service Vulnerability
CVE-2021-31941 1 Microsoft 3 365 Apps, Office, Outlook 2024-11-21 6.8 MEDIUM 7.8 HIGH
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-28452 1 Microsoft 3 365 Apps, Office, Outlook 2024-11-21 6.8 MEDIUM 7.1 HIGH
Microsoft Outlook Memory Corruption Vulnerability