CVE-2026-80084
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
Out-of-bounds read in Microsoft Office Outlook. An unauthorized attacker can disclose information over a network.
Risk Assessment
Risk of disclosing data from memory, potentially including email content and other confidential information.
Recommendation
Update Microsoft Office Outlook to a version with security fixes.
Other vulnerabilities in Microsoft Office Outlook
See all- CVE-2026-100208High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78509Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70125High
Microsoft Office Outlook contains a remote code execution vulnerability. Technical details were not provided in the description.
- CVE-2026-80073Medium
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
- CVE-2026-78525High
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78520Medium
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78519High
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-69629High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70329High
An integer overflow vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-62882Medium
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS