Filtered by vendor Microsoft Subscriptions
Filtered by product Outlook Subscriptions
Total 127 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-30103 1 Microsoft 7 365 Apps, Office, Office 2019 and 4 more 2026-11-04 8.8 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2018-0851 1 Microsoft 3 Office, Office Word Viewer, Outlook 2026-10-15 N/A
Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.
CVE-2023-35311 1 Microsoft 6 365 Apps, Office, Office 2019 and 3 more 2026-10-08 8.8 High
Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2026-78519 1 Microsoft 11 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office 2016 and 8 more 2026-09-10 8.8 High
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-80073 1 Microsoft 8 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 5 more 2026-09-10 6.5 Medium
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-69629 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-09-09 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-62882 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-08-14 4.3 Medium
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-70329 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-08-14 8.8 High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2024-21378 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2026-08-10 8.8 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-43604 1 Microsoft 1 Outlook 2026-06-09 5.7 Medium
Outlook for Android Elevation of Privilege Vulnerability
CVE-2025-21361 1 Microsoft 5 Office, Office Long Term Servicing Channel, Office Macos 2021 and 2 more 2026-05-19 7.8 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2026-42893 1 Microsoft 1 Outlook 2026-05-13 7.4 High
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.
CVE-2007-4040 1 Microsoft 2 Outlook, Outlook Express 2026-04-23 8.8 High
Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.
CVE-2007-0033 1 Microsoft 2 Office, Outlook 2026-04-23 N/A
Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file.
CVE-2006-3877 1 Microsoft 14 Access, Excel, Excel Viewer and 11 more 2026-04-23 N/A
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
CVE-2007-0034 1 Microsoft 2 Office, Outlook 2026-04-23 N/A
Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."
CVE-2008-3068 1 Microsoft 17 Access, Excel, Frontpage and 14 more 2026-04-23 N/A
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.
CVE-2006-1305 1 Microsoft 2 Office, Outlook 2026-04-23 N/A
Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers.
CVE-2006-6659 1 Microsoft 3 Ie, Outlook, Windows Xp 2026-04-23 N/A
The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (Internet Explorer 7 hang) via crafted HTML.
CVE-2015-1641 1 Microsoft 6 Office, Office Compatibility Pack, Office Web Apps and 3 more 2026-04-22 7.8 High
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."