Microsoft Outlook vulnerabilities
16 known CVE vulnerabilities in Microsoft Outlook, translated and rated.
- CVE-2025-21361High
A vulnerability in Microsoft Outlook allows for remote code execution, potentially enabling an attacker to take control of the user's system. This flaw can be exploited by sending a specially crafted email.
- CVE-2017-11776High
Microsoft Outlook 2016 allows an attacker to obtain the email content of a user due to how it discloses this information.
- CVE-2017-8663High
Microsoft Outlook versions 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 contain a remote code execution vulnerability due to improper parsing of specially crafted email messages.
- CVE-2017-8571High
Microsoft Outlook versions 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 contain a vulnerability that allows a security feature bypass due to the way it handles input.
- CVE-2016-3278High
Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
- CVE-2024-21413CriticalActively exploited
Remote code execution vulnerability in Microsoft Outlook. Allows an attacker to execute code remotely on the victim's machine.
- CVE-2024-21378High
Remote code execution vulnerability in Microsoft Outlook. Allows an attacker to execute code remotely in the context of the user.
- CVE-2023-35311HighActively exploited
A vulnerability in Microsoft Outlook allows for a security feature bypass, potentially leading to unauthorized access to user data.
- CVE-2023-33131High
A vulnerability in Microsoft Outlook allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through specially crafted email messages.
- CVE-1999-1164Medium
The Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang.
- CVE-2024-43482Medium
Information disclosure vulnerability in Microsoft Outlook for iOS. Could allow unauthorized access to data.
- CVE-2024-30103High
A remote code execution vulnerability in Microsoft Outlook allows an attacker to execute arbitrary code in the context of the victim by sending a specially crafted email. The flaw can be exploited without user interaction beyond opening the message.
- CVE-2023-36895High
A vulnerability in Microsoft Outlook allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw by sending a specially crafted email.
- CVE-2023-36893Medium
A vulnerability in Microsoft Outlook allows for spoofing, potentially leading to false email messages. An attacker can exploit this flaw to impersonate another user.
- CVE-2023-33153Medium
A vulnerability in Microsoft Outlook allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2023-33151Medium
A vulnerability in Microsoft Outlook allows for spoofing, which may lead to unauthorized access to user information. An attacker can exploit this flaw to impersonate others in email correspondence.

