Microsoft Outlook Rt vulnerabilities

6 CVEs affecting Microsoft Outlook Rt, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-33131, published 2023-06-14.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-3278, published 2016-07-13. High severity, CVSS 7.8. EPSS: 20.4% chance of exploitation in the next 30 days. Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
• CVE-2018-8524, published 2018-11-14. High severity, CVSS 7.8. EPSS: 19.1% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This…
• CVE-2018-8522, published 2018-11-14. High severity, CVSS 7.8. EPSS: 19.1% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This…
• CVE-2018-8582, published 2018-11-14. High severity, CVSS 8.8. EPSS: 18.6% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects…
• CVE-2023-33131, published 2023-06-14. High severity, CVSS 8.8. EPSS: 5.7% chance of exploitation in the next 30 days. Microsoft Outlook Remote Code Execution Vulnerability
• CVE-2018-8244, published 2018-06-14. Medium severity, CVSS 6.5. EPSS: 5.3% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka "Microsoft Outlook Elevation of Privilege Vulnerability." This affects…