What’s Vulnerable › Products
Microsoft Outlook vulnerabilities
125 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.
Check whether your Microsoft Outlook version is affected
Exploited Microsoft Outlook vulnerabilities
- CVE-2007-0671 — Microsoft Office Excel Remote Code Execution Vulnerability
- CVE-2023-35311 — Microsoft Outlook Security Feature Bypass Vulnerability
- CVE-2023-23397 — Microsoft Office Outlook Privilege Escalation Vulnerability
- CVE-2017-11774 — Microsoft Office Outlook Security Feature Bypass Vulnerability
- CVE-2015-1641 — Microsoft Office Memory Corruption Vulnerability
Latest Microsoft Outlook vulnerabilities
- CVE-2026-80073 — Microsoft Office Outlook Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-78519 — Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-69629 — Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-70329 — Microsoft Outlook Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-62882 — Microsoft Outlook Spoofing Vulnerability (CVSS 4.3)
- CVE-2026-42893 — Microsoft Outlook for iOS Tampering Vulnerability (CVSS 7.5)
- CVE-2026-26133 — M365 Copilot Information Disclosure Vulnerability (CVSS 7.1)
- CVE-2026-21260 — Microsoft Outlook Spoofing Vulnerability (CVSS 7.5)
- CVE-2025-49699 — Microsoft Office Remote Code Execution Vulnerability (CVSS 7.0)
- CVE-2025-47171 — Microsoft Outlook Remote Code Execution Vulnerability (CVSS 6.7)
- CVE-2025-29805 — Outlook for Android Information Disclosure Vulnerability (CVSS 7.5)
- CVE-2025-21259 — Microsoft Outlook Spoofing Vulnerability (CVSS 5.3)
- CVE-2025-21361 — Microsoft Outlook Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-21357 — Microsoft Outlook Remote Code Execution Vulnerability (CVSS 6.7)
- CVE-2024-42220 — (CVSS 9.1)
- CVE-2024-43604 — Outlook for Android Elevation of Privilege Vulnerability (CVSS 8.0)
- CVE-2024-43482 — Microsoft Outlook for iOS Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2024-38173 — Microsoft Outlook Remote Code Execution Vulnerability (CVSS 6.7)
- CVE-2024-38020 — Microsoft Outlook Spoofing Vulnerability (CVSS 6.5)
- CVE-2024-30103 — Microsoft Outlook Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2024-20670 — Outlook for Windows Spoofing Vulnerability (CVSS 8.1)
- CVE-2024-26204 — Outlook for Android Information Disclosure Vulnerability (CVSS 7.5)
- CVE-2024-21378 — Microsoft Outlook Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2023-36763 — Microsoft Outlook Information Disclosure Vulnerability (CVSS 7.5)
- CVE-2023-36893 — Microsoft Outlook Spoofing Vulnerability (CVSS 6.5)