Outlook 2016 (Microsoft) - vulnerabilities (CVEs)
18 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-09-08. Vendor: Microsoft.
CVEs of Outlook 2016
- CVE-2026-80073 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
- CVE-2026-78519 - CVSS 8.8 (high), 2026-09-08: Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-69629 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-62882 - CVSS 4.3 (medium), 2026-08-11: Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-70329 - CVSS 8.8 (high), 2026-08-11: Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-63518 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-26133 - CVSS 7.1 (high), 2026-03-16: AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- CVE-2026-21260 - CVSS 7.5 (high), 2026-02-10: Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
- CVE-2025-49699 - CVSS 7 (high), 2025-07-08: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-47171 - CVSS 6.7 (medium), 2025-06-10: Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.
- CVE-2025-29805 - CVSS 7.5 (high), 2025-04-08: Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network.
- CVE-2025-21259 - CVSS 5.3 (medium), 2025-02-11: Microsoft Outlook Spoofing Vulnerability
- CVE-2025-21357 - CVSS 6.7 (medium), 2025-01-14: Microsoft Outlook Remote Code Execution Vulnerability
- CVE-2024-30103 - CVSS 8.8 (high), 2024-06-11: Microsoft Outlook Remote Code Execution Vulnerability
- CVE-2023-36893 - CVSS 6.5 (medium), 2023-08-08: Microsoft Outlook Spoofing Vulnerability
- CVE-2022-24480 - CVSS 6.3 (medium), 2022-12-13: Outlook for Android Elevation of Privilege Vulnerability
- CVE-2022-23280 - CVSS 5.3 (medium), 2022-02-09: Microsoft Outlook for Mac Security Feature Bypass Vulnerability
- CVE-2020-17119 - CVSS 7.5 (high), 2020-12-10: Microsoft Outlook Information Disclosure Vulnerability
