CVE-2001-0538: Microsoft Outlook

High severity, CVSS 10.0. EPSS: 52.9% chance of exploitation in the next 30 days.

Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.

Affected products

• Microsoft Outlook: up to and including 2002

Published 2001-08-14. Last modified 2026-06-16.