Microsoft Office Outlook vulnerabilities

22 known CVE vulnerabilities in Microsoft Office Outlook, translated and rated.

CVE-2026-97749Critical
Microsoft Office Outlook is affected by a double free vulnerability. This allows an unauthorized attacker to execute code over a network.
CVE-2026-97016Critical
Microsoft Office Outlook is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
CVE-2026-88156Critical
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70291Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70242Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78509Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-108448High
A heap-based buffer overflow in Microsoft Office Outlook allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.
CVE-2026-97012High
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70282High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70281High
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-70257High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70256High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-100208High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70125High
Microsoft Office Outlook contains a remote code execution vulnerability. Technical details were not provided in the description.
CVE-2026-80084Medium
Out-of-bounds read in Microsoft Office Outlook. An unauthorized attacker can disclose information over a network.
CVE-2026-80073Medium
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-78525High
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78520Medium
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78519High
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-69629High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70329High
An integer overflow vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-62882Medium
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS