Known Vulnerabilities for Outlook by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Outlook" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126626 json | The web services listener of Progressive Robot hMailServer 6.3.3 through 6.3.7 counts every failed CardDAV, CalDAV or Autodis... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-126614 json | The web services listener of Progressive Robot hMailServer 6.3.3 through 6.3.7 does not apply the server's IP ranges to the c... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-124228 json | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authoriz... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124227 json | Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124194 json | Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofi... | Not Provided | 2026-11-10 | 2026-11-11 |
| CVE-2026-123384 json | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-123383 json | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-123382 json | Untrusted pointer dereference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-123381 json | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-123380 json | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Microsoft | Outlook | xp | |||
| Application | Microsoft | Outlook | 98 | |||
| Application | Microsoft | Outlook | 97 | |||
| Application | Microsoft | Outlook | 3.33.0 | |||
| Application | Microsoft | Outlook | 3.32.0 | |||
| Application | Microsoft | Outlook | 3.31.0 | |||
| Application | Microsoft | Outlook | 3.30.0 | |||
| Application | Microsoft | Outlook | 3.29.0 | |||
| Application | Microsoft | Outlook | 3.28.0 | |||
| Application | Microsoft | Outlook | 3.27.1 | |||
| Application | Microsoft | Outlook | 3.27.0 | |||
| Application | Microsoft | Outlook | 3.26.0 | |||
| Application | Microsoft | Outlook | 3.25.0 | |||
| Application | Microsoft | Outlook | 3.24.1 | |||
| Application | Microsoft | Outlook | 3.24.0 | |||
| Application | Microsoft | Outlook | 3.23.0 | |||
| Application | Microsoft | Outlook | 3.22.1 | |||
| Application | Microsoft | Outlook | 3.22.0 | |||
| Application | Microsoft | Outlook | 3.21.0 | |||
| Application | Microsoft | Outlook | 3.20.0 |