[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7v_xd9yLUFOMrGTV8V4Q3EFO8p0wTe-xyXV5TSMJt5c":3,"g5a-family:microsoft\u002Foutlook":252,"g5a-ex:microsoft\u002Foutlook@*":267},{"success":4,"data":5},true,{"product":6,"versions":103,"topVulnerabilitiesByEpss":141,"kevVulnerabilities":201,"seoMetadata":230,"meta":249},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":102},"microsoft","outlook",37,115,5,"2025-02-11",[14,19,22,25,28,31,34,37,41,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,97,100],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"16.83.3",1,0,false,{"version":20,"cve_count":21,"kev_count":16,"has_kev":4},"2000",23,{"version":23,"cve_count":24,"kev_count":16,"has_kev":4},"2002",18,{"version":26,"cve_count":27,"kev_count":16,"has_kev":4},"2003",20,{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},"2007",17,{"version":32,"cve_count":33,"kev_count":16,"has_kev":4},"2010",35,{"version":35,"cve_count":36,"kev_count":16,"has_kev":4},"2011",2,{"version":38,"cve_count":39,"kev_count":40,"has_kev":4},"2013",42,3,{"version":42,"cve_count":43,"kev_count":40,"has_kev":4},"2016",50,{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},"3.12.0",{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},"3.13.0",{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},"3.14.0",{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},"3.15.0",{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},"3.16.0",{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},"3.17.0",{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},"3.17.1",{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},"3.18.0",{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},"3.20.0",{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},"3.21.0",{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},"3.22.0",{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},"3.22.1",{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},"3.23.0",{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},"3.24.0",{"version":73,"cve_count":17,"kev_count":17,"has_kev":18},"3.24.1",{"version":75,"cve_count":17,"kev_count":17,"has_kev":18},"3.25.0",{"version":77,"cve_count":17,"kev_count":17,"has_kev":18},"3.26.0",{"version":79,"cve_count":17,"kev_count":17,"has_kev":18},"3.27.0",{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},"3.27.1",{"version":83,"cve_count":17,"kev_count":17,"has_kev":18},"3.28.0",{"version":85,"cve_count":17,"kev_count":17,"has_kev":18},"3.29.0",{"version":87,"cve_count":17,"kev_count":17,"has_kev":18},"3.30.0",{"version":89,"cve_count":17,"kev_count":17,"has_kev":18},"3.31.0",{"version":91,"cve_count":17,"kev_count":17,"has_kev":18},"3.32.0",{"version":93,"cve_count":17,"kev_count":17,"has_kev":18},"3.33.0",{"version":95,"cve_count":96,"kev_count":17,"has_kev":18},"97",7,{"version":98,"cve_count":99,"kev_count":17,"has_kev":18},"98",12,{"version":101,"cve_count":17,"kev_count":17,"has_kev":18},"xp","Outlook by Microsoft is a technology product with 37 tracked versions and 115 known security vulnerabilities including 5 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":16,"has_kev":4},{"version":23,"cve_count":24,"kev_count":16,"has_kev":4},{"version":26,"cve_count":27,"kev_count":16,"has_kev":4},{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},{"version":32,"cve_count":33,"kev_count":16,"has_kev":4},{"version":35,"cve_count":36,"kev_count":16,"has_kev":4},{"version":38,"cve_count":39,"kev_count":40,"has_kev":4},{"version":42,"cve_count":43,"kev_count":40,"has_kev":4},{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},{"version":73,"cve_count":17,"kev_count":17,"has_kev":18},{"version":75,"cve_count":17,"kev_count":17,"has_kev":18},{"version":77,"cve_count":17,"kev_count":17,"has_kev":18},{"version":79,"cve_count":17,"kev_count":17,"has_kev":18},{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},{"version":83,"cve_count":17,"kev_count":17,"has_kev":18},{"version":85,"cve_count":17,"kev_count":17,"has_kev":18},{"version":87,"cve_count":17,"kev_count":17,"has_kev":18},{"version":89,"cve_count":17,"kev_count":17,"has_kev":18},{"version":91,"cve_count":17,"kev_count":17,"has_kev":18},{"version":93,"cve_count":17,"kev_count":17,"has_kev":18},{"version":95,"cve_count":96,"kev_count":17,"has_kev":18},{"version":98,"cve_count":99,"kev_count":17,"has_kev":18},{"version":101,"cve_count":17,"kev_count":17,"has_kev":18},[142,150,157,164,170,175,181,186,191,196],{"cveId":143,"description":144,"publishedDate":145,"cvssScore":146,"cvssVersion":147,"severity":148,"isKev":4,"epssScore":149},"CVE-2015-1641","Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka \"Microsoft Office Memory Corruption Vulnerability.\"","2015-04-14",7.8,"v3.1","High",0.97246,{"cveId":151,"description":152,"publishedDate":153,"cvssScore":154,"cvssVersion":147,"severity":155,"isKev":4,"epssScore":156},"CVE-2023-23397","Microsoft Outlook Elevation of Privilege Vulnerability","2023-03-14",9.8,"Critical",0.97159,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":161,"cvssVersion":162,"severity":148,"isKev":18,"epssScore":163},"CVE-2004-0204","Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via \"..\" sequences in the dynamicimag argument to crystalimagehandler.aspx.","2004-08-06",7.5,"v2",0.72368,{"cveId":165,"description":166,"publishedDate":167,"cvssScore":168,"cvssVersion":162,"severity":155,"isKev":18,"epssScore":169},"CVE-2006-4868","Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.","2006-09-19",9.3,0.6144,{"cveId":171,"description":172,"publishedDate":173,"cvssScore":146,"cvssVersion":147,"severity":148,"isKev":4,"epssScore":174},"CVE-2017-11774","Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka \"Microsoft Outlook Security Feature Bypass Vulnerability.\"","2017-10-13",0.59627,{"cveId":176,"description":177,"publishedDate":178,"cvssScore":179,"cvssVersion":162,"severity":155,"isKev":18,"epssScore":180},"CVE-2001-0538","Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.","2001-08-14",10,0.52851,{"cveId":182,"description":183,"publishedDate":184,"cvssScore":168,"cvssVersion":162,"severity":155,"isKev":18,"epssScore":185},"CVE-2010-0266","Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka \"Microsoft Outlook SMB Attachment Vulnerability.\"","2010-07-15",0.50711,{"cveId":187,"description":188,"publishedDate":189,"cvssScore":168,"cvssVersion":162,"severity":155,"isKev":18,"epssScore":190},"CVE-2004-0200","Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.","2004-09-28",0.49024,{"cveId":192,"description":193,"publishedDate":194,"cvssScore":161,"cvssVersion":162,"severity":148,"isKev":18,"epssScore":195},"CVE-2004-0121","Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.","2004-04-15",0.47676,{"cveId":197,"description":198,"publishedDate":199,"cvssScore":161,"cvssVersion":162,"severity":148,"isKev":18,"epssScore":200},"CVE-2006-0002","Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.","2006-01-10",0.45584,[202,212,219,223,227],{"cveId":203,"description":204,"publishedDate":205,"cvssScore":206,"severity":148,"isKev":4,"epssScore":207,"cisaVulnName":208,"cisaDateAdded":209,"cisaShortDescription":210,"cisaRequiredAction":211},"CVE-2007-0671","Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.","2007-02-03",8.8,0.43241,"Microsoft Office Excel Remote Code Execution Vulnerability","2025-08-12","Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":213,"description":214,"publishedDate":215,"cvssScore":206,"severity":148,"isKev":4,"epssScore":216,"cisaVulnName":214,"cisaDateAdded":215,"cisaShortDescription":217,"cisaRequiredAction":218},"CVE-2023-35311","Microsoft Outlook Security Feature Bypass Vulnerability","2023-07-11",0.15522,"Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":151,"description":152,"publishedDate":153,"cvssScore":154,"severity":155,"isKev":4,"epssScore":156,"cisaVulnName":220,"cisaDateAdded":153,"cisaShortDescription":221,"cisaRequiredAction":222},"Microsoft Office Outlook Privilege Escalation Vulnerability","Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.","Apply updates per vendor instructions.",{"cveId":143,"description":144,"publishedDate":145,"cvssScore":146,"severity":148,"isKev":4,"epssScore":149,"cisaVulnName":224,"cisaDateAdded":225,"cisaShortDescription":226,"cisaRequiredAction":222},"Microsoft Office Memory Corruption Vulnerability","2021-11-03","Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user.",{"cveId":171,"description":172,"publishedDate":173,"cvssScore":146,"severity":148,"isKev":4,"epssScore":174,"cisaVulnName":228,"cisaDateAdded":225,"cisaShortDescription":229,"cisaRequiredAction":222},"Microsoft Office Outlook Security Feature Bypass Vulnerability","Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful exploitation allows an attacker to execute commands.",{"title":231,"metaDescription":232,"keywords":233,"structuredData":234},"Outlook by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Outlook by Microsoft covering 37 versions with 115 tracked vulnerabilities including 1 critical and 4 high-severity issues and 5 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Outlook vulnerabilities, Outlook security, Outlook CVE, Microsoft Outlook, Outlook threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Outlook KEV, Outlook exploited vulnerabilities",{"@context":235,"@type":236,"name":237,"description":232,"url":238,"manufacturer":239,"applicationCategory":243,"softwareVersion":244,"mainEntity":245},"https:\u002F\u002Fschema.org","SoftwareApplication","Outlook","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Foutlook",{"@type":240,"name":241,"url":242},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","37 versions tracked",{"@type":246,"name":247,"description":248,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Outlook Security Vulnerabilities","Security vulnerabilities affecting Outlook by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":250,"apiVersion":251},"2026-10-16T23:38:31.371Z","3.0",[253,256,259,261,263,265],{"product":254,"cves":255},"outlook_express",45,{"product":257,"cves":258},"outlook_rt",6,{"product":260,"cves":11},"outlook_web_access",{"product":262,"cves":16},"outlook_2016",{"product":264,"cves":16},"outlook_connector",{"product":266,"cves":16},"outlook_express_book_control",{"rows":268,"total":11,"capped":18,"failed":17},[269,273,278,282,286],{"cveId":203,"name":208,"severity":148,"cvss":206,"added":209,"epss":207,"published":270,"ranges":271,"checked":4,"hits":272,"covers":18},"2007-02-03T01:28:00",[20,23,26],[],{"cveId":213,"name":214,"severity":148,"cvss":206,"added":215,"epss":216,"published":274,"ranges":275,"checked":4,"hits":277,"covers":18},"2023-07-11T18:15:17.177",[38,276,42],"2013-sp1",[],{"cveId":151,"name":220,"severity":155,"cvss":154,"added":153,"epss":156,"published":279,"ranges":280,"checked":4,"hits":281,"covers":18},"2023-03-14T17:15:13.263",[276,42],[],{"cveId":143,"name":224,"severity":148,"cvss":146,"added":225,"epss":149,"published":283,"ranges":284,"checked":4,"hits":285,"covers":18},"2015-04-14T20:59:05.25",[35],[],{"cveId":171,"name":228,"severity":148,"cvss":146,"added":225,"epss":174,"published":287,"ranges":288,"checked":4,"hits":290,"covers":18},"2017-10-13T13:29:00.427",[289,276,42],"2010-sp2",[]]