Microsoft Office Outlook vulnerabilities

8 CVEs affecting Microsoft Office Outlook, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-4837, published 2008-12-10.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-4028, published 2008-12-10. High severity, CVSS 9.3. EPSS: 38.1% chance of exploitation in the next 30 days. Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007…
• CVE-2008-4837, published 2008-12-10. High severity, CVSS 9.3. EPSS: 37.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007…
• CVE-2008-4027, published 2008-12-10. High severity, CVSS 9.3. EPSS: 33.9% chance of exploitation in the next 30 days. Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word,…
• CVE-2008-4025, published 2008-12-10. High severity, CVSS 9.3. EPSS: 32.9% chance of exploitation in the next 30 days. Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and…
• CVE-2008-4024, published 2008-12-10. High severity, CVSS 9.3. EPSS: 28.9% chance of exploitation in the next 30 days. Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information…
• CVE-2008-4031, published 2008-12-10. High severity, CVSS 9.3. EPSS: 23.4% chance of exploitation in the next 30 days. Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007…
• CVE-2008-4030, published 2008-12-10. High severity, CVSS 9.3. EPSS: 23.4% chance of exploitation in the next 30 days. Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007…
• CVE-2008-4026, published 2008-12-10. High severity, CVSS 9.3. EPSS: 23.4% chance of exploitation in the next 30 days. Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1;…