Microsoft Outlook vulnerabilities

125 CVEs affecting Microsoft Outlook, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-80073, published 2026-09-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-1641: Microsoft Office Memory Corruption Vulnerability, published 2015-04-14. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 97.2% chance of exploitation in the next 30 days. Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and…
CVE-2023-23397: Microsoft Office Outlook Privilege Escalation Vulnerability, published 2023-03-14. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-03-14. EPSS: 97.2% chance of exploitation in the next 30 days. Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2017-11774: Microsoft Office Outlook Security Feature Bypass Vulnerability, published 2017-10-13. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 59.6% chance of exploitation in the next 30 days. Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft…
CVE-2007-0671: Microsoft Office Excel Remote Code Execution Vulnerability, published 2007-02-03. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-08-12. EPSS: 43.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack…
CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability, published 2023-07-11. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2023-07-11. EPSS: 15.5% chance of exploitation in the next 30 days. Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2004-0204, published 2004-08-06. High severity, CVSS 7.5. EPSS: 72.4% chance of exploitation in the next 30 days. Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business…
CVE-2006-4868, published 2006-09-19. High severity, CVSS 9.3. EPSS: 61.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote…
CVE-2001-0538, published 2001-08-14. High severity, CVSS 10.0. EPSS: 52.9% chance of exploitation in the next 30 days. Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
CVE-2010-0266, published 2010-07-15. High severity, CVSS 9.3. EPSS: 50.7% chance of exploitation in the next 30 days. Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted…
CVE-2004-0200, published 2004-09-28. High severity, CVSS 9.3. EPSS: 49% chance of exploitation in the next 30 days. Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with…

Latest

CVE-2026-80073, published 2026-09-08. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-78519, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-69629, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70329, published 2026-08-11. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-62882, published 2026-08-11. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-42893, published 2026-05-12. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.
CVE-2026-26133, published 2026-03-16. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-21260, published 2026-02-10. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-49699, published 2025-07-08. High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47171, published 2025-06-10. Medium severity, CVSS 6.7. EPSS: 1.7% chance of exploitation in the next 30 days. Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.