CVE-2010-0266: Microsoft Outlook

High severity, CVSS 9.3. EPSS: 55.3% chance of exploitation in the next 30 days.

Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachment Vulnerability."

Affected products

• Microsoft Outlook: version 2002 only; version 2003 only; version 2007 only

Published 2010-07-15. Last modified 2026-06-16.