Vulnerabilities > Microsoft > Outlook

DATE CVE VULNERABILITY TITLE RISK
2019-08-14 CVE-2019-1218 Cross-site Scripting vulnerability in Microsoft Outlook
A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages.
network
low complexity
microsoft CWE-79
5.4
2019-08-14 CVE-2019-1204 Improper Input Validation vulnerability in Microsoft Office, Office 365 Proplus and Outlook
An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages.
network
low complexity
microsoft CWE-20
4.3
2019-08-14 CVE-2019-1200 Unspecified vulnerability in Microsoft Office, Office 365 Proplus and Outlook
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory.
local
low complexity
microsoft
7.8
2019-07-29 CVE-2019-1105 Cross-site Scripting vulnerability in Microsoft Outlook
A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages, aka 'Outlook for Android Spoofing Vulnerability'.
network
low complexity
microsoft CWE-79
5.4
2019-07-15 CVE-2019-1084 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters.
network
low complexity
microsoft CWE-200
6.5
2019-01-08 CVE-2019-0560 Unspecified vulnerability in Microsoft Office, Office 365 Proplus and Outlook
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office.
local
low complexity
microsoft
5.5
2019-01-08 CVE-2019-0559 Unspecified vulnerability in Microsoft Office, Office 365 Proplus and Outlook
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
network
low complexity
microsoft
6.5
2018-11-14 CVE-2018-8582 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
network
low complexity
microsoft
8.8
2018-11-14 CVE-2018-8576 Unspecified vulnerability in Microsoft Office, Office 365 Proplus and Outlook
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
local
low complexity
microsoft
7.8
2018-11-14 CVE-2018-8524 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
local
low complexity
microsoft
7.8