Microsoft Outlook
121 CVEs affecting Microsoft Outlook. Latest disclosed: 2026-05-12. Critical: 1, High: 41.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-23397 | Critical | 9.8 | 2023-03-14 | Microsoft Outlook Elevation of Privilege Vulnerability |
CVE-2024-30103 | High | 8.8 | 2024-06-11 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-21378 | High | 8.8 | 2024-02-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2023-35311 | High | 8.8 | 2023-07-11 | Microsoft Outlook Security Feature Bypass Vulnerability |
CVE-2023-33131 | High | 8.8 | 2023-06-14 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2020-0760 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulne… |
CVE-2018-8582 | High | 8.8 | 2018-11-14 | A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code… |
CVE-2018-0852 | High | 8.8 | 2018-02-15 | Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (… |
CVE-2018-0851 | High | 8.8 | 2018-02-15 | Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft… |
CVE-2007-4040 | High | 8.8 | 2007-07-27 | Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-br… |
CVE-2007-0671 | High | 8.8 | 2007-02-03 | Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to exe… |
CVE-2024-20670 | High | 8.1 | 2024-04-09 | Outlook for Windows Spoofing Vulnerability |
CVE-2025-21361 | High | 7.8 | 2025-01-14 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2021-31941 | High | 7.8 | 2021-06-08 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2020-1349 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Co… |
CVE-2019-1200 | High | 7.8 | 2019-08-14 | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exp… |
CVE-2018-8576 | High | 7.8 | 2018-11-14 | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Co… |
CVE-2018-8524 | High | 7.8 | 2018-11-14 | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Co… |
CVE-2018-8522 | High | 7.8 | 2018-11-14 | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Co… |
CVE-2018-0791 | High | 7.8 | 2018-01-10 | Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, and Microsoft Outlook 2016 allow a remote code execution vulnerability due to the way e… |