Product:

Outlook

(Microsoft)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 108
Date Id Summary Products Score Patch Annotated
2001-06-05 CVE-2001-1088 Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user. Outlook, Outlook_express N/A
2021-06-08 CVE-2021-31941 Microsoft Office Graphics Remote Code Execution Vulnerability 365_apps, Office, Outlook 7.8
2021-06-08 CVE-2021-31949 Microsoft Outlook Remote Code Execution Vulnerability 365_apps, Office, Outlook 7.3
2023-06-14 CVE-2023-33131 Microsoft Outlook Remote Code Execution Vulnerability Office, Office_long_term_servicing_channel, Outlook, Outlook_rt 8.8
2023-06-01 CVE-2022-35742 Microsoft Outlook Denial of Service Vulnerability 365_apps, Office, Office_long_term_servicing_channel, Outlook 7.5
2020-07-14 CVE-2020-1349 A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'. 365_apps, Office, Outlook 7.8
1997-01-01 CVE-1999-0519 A NETBIOS/SMB share password is the default, null, or missing. Outlook, Windows_2000, Windows_95, Windows_nt N/A
2013-11-13 CVE-2013-3905 Microsoft Outlook 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT does not properly expand metadata contained in S/MIME certificates, which allows remote attackers to obtain sensitive network configuration and state information via a crafted certificate in an e-mail message, aka "S/MIME AIA Vulnerability." Outlook N/A
2016-09-14 CVE-2016-3366 Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office Spoofing Vulnerability." Outlook 6.5
2017-08-01 CVE-2017-8571 Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security feature bypass vulnerability due to the way that it handles input, aka "Microsoft Office Outlook Security Feature Bypass Vulnerability". Outlook 7.8