CVE-2026-69629
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Risk Assessment
A remote attacker could execute malicious code on the vulnerable system, potentially leading to full system compromise.
Recommendation
Apply the latest security updates for Microsoft Office Outlook.
Other vulnerabilities in Microsoft Office Outlook
See all- CVE-2026-100208High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78509Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70125High
Microsoft Office Outlook contains a remote code execution vulnerability. Technical details were not provided in the description.
- CVE-2026-80084Medium
Out-of-bounds read in Microsoft Office Outlook. An unauthorized attacker can disclose information over a network.
- CVE-2026-80073Medium
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
- CVE-2026-78525High
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78520Medium
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78519High
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70329High
An integer overflow vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-62882Medium
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS