[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUNlFfnLtFaq0YljU_guK-nEdEIJYub-37iGhoSEaoJM":3,"g5a-ex:microsoft\u002Foutlook_express@*":174,"g5a-family:microsoft\u002Foutlook_express":176},{"success":4,"data":5},true,{"product":6,"versions":67,"topVulnerabilitiesByEpss":90,"kevVulnerabilities":151,"seoMetadata":152,"meta":171},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":66},"microsoft","outlook_express",22,45,0,"2010-08-27",[14,18,21,24,27,30,32,34,36,38,40,43,45,47,49,51,53,56,58,60,62,64],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"4.0",6,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"4.01",5,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"4.27.3110",2,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"4.27.3110.1",3,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"4.5",1,{"version":31,"cve_count":23,"kev_count":11,"has_kev":17},"4.72.2106",{"version":33,"cve_count":23,"kev_count":11,"has_kev":17},"4.72.2106.4",{"version":35,"cve_count":20,"kev_count":11,"has_kev":17},"4.72.3120.0",{"version":37,"cve_count":23,"kev_count":11,"has_kev":17},"4.72.3612",{"version":39,"cve_count":23,"kev_count":11,"has_kev":17},"4.72.3612.1700",{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},"5.0",14,{"version":44,"cve_count":16,"kev_count":11,"has_kev":17},"5.0.1",{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},"5.01",{"version":48,"cve_count":23,"kev_count":11,"has_kev":17},"5.0.2",{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},"5.02",{"version":52,"cve_count":29,"kev_count":11,"has_kev":17},"5.0.3",{"version":54,"cve_count":55,"kev_count":11,"has_kev":17},"5.5",13,{"version":57,"cve_count":9,"kev_count":11,"has_kev":17},"6.0",{"version":59,"cve_count":23,"kev_count":11,"has_kev":17},"6.00.2800.1106",{"version":61,"cve_count":11,"kev_count":11,"has_kev":17},"6.00.2900.2180",{"version":63,"cve_count":23,"kev_count":11,"has_kev":17},"6.00.2900.5512",{"version":65,"cve_count":11,"kev_count":11,"has_kev":17},"7.0","Outlook Express by Microsoft is a technology product with 22 tracked versions and 45 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":23,"kev_count":11,"has_kev":17},{"version":33,"cve_count":23,"kev_count":11,"has_kev":17},{"version":35,"cve_count":20,"kev_count":11,"has_kev":17},{"version":37,"cve_count":23,"kev_count":11,"has_kev":17},{"version":39,"cve_count":23,"kev_count":11,"has_kev":17},{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},{"version":44,"cve_count":16,"kev_count":11,"has_kev":17},{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},{"version":48,"cve_count":23,"kev_count":11,"has_kev":17},{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},{"version":52,"cve_count":29,"kev_count":11,"has_kev":17},{"version":54,"cve_count":55,"kev_count":11,"has_kev":17},{"version":57,"cve_count":9,"kev_count":11,"has_kev":17},{"version":59,"cve_count":23,"kev_count":11,"has_kev":17},{"version":61,"cve_count":11,"kev_count":11,"has_kev":17},{"version":63,"cve_count":23,"kev_count":11,"has_kev":17},{"version":65,"cve_count":11,"kev_count":11,"has_kev":17},[91,99,106,112,119,124,130,135,140,146],{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":96,"severity":97,"isKev":17,"epssScore":98},"CVE-2005-1213","Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.","2005-06-14",7.5,"v2","High",0.73961,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":103,"cvssVersion":96,"severity":104,"isKev":17,"epssScore":105},"CVE-2004-0380","The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the \"MHTML URL Processing Vulnerability.\"","2004-05-04",10,"Critical",0.6325,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":96,"severity":104,"isKev":17,"epssScore":111},"CVE-2007-3897","Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.","2007-10-09",9.3,0.54631,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":96,"severity":117,"isKev":17,"epssScore":118},"CVE-2006-2111","A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka \"URL Redirect Cross Domain Information Disclosure Vulnerability.\"","2006-05-01",4.3,"Medium",0.4031,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":20,"cvssVersion":96,"severity":117,"isKev":17,"epssScore":123},"CVE-2000-0567","Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the \"Malformed E-mail Header\" vulnerability.","2000-07-18",0.32329,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":96,"severity":117,"isKev":17,"epssScore":129},"CVE-2006-2386","Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book (WAB) file.","2006-12-13",6.8,0.28918,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":95,"cvssVersion":96,"severity":97,"isKev":17,"epssScore":134},"CVE-2001-1325","Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).","2001-04-20",0.27292,{"cveId":136,"description":137,"publishedDate":138,"cvssScore":20,"cvssVersion":96,"severity":117,"isKev":17,"epssScore":139},"CVE-2000-0653","Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the \"Persistent Mail-Browser Link\" vulnerability.","2000-07-20",0.26887,{"cveId":141,"description":142,"publishedDate":143,"cvssScore":144,"cvssVersion":96,"severity":97,"isKev":17,"epssScore":145},"CVE-2008-1448","The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via an mhtml: URI in conjunction with a redirection, aka \"URL Parsing Cross-Domain Information Disclosure Vulnerability.\"","2008-08-13",7.1,0.2663,{"cveId":147,"description":148,"publishedDate":149,"cvssScore":20,"cvssVersion":96,"severity":117,"isKev":17,"epssScore":150},"CVE-2004-2137","Outlook Express 6.0, when sending multipart e-mail messages using the \"Break apart messages larger than\" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information.","2004-12-31",0.26142,[],{"title":153,"metaDescription":154,"keywords":155,"structuredData":156},"Outlook Express by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Outlook Express by Microsoft covering 22 versions with 45 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Outlook Express vulnerabilities, Outlook Express security, Outlook Express CVE, Microsoft Outlook Express, Outlook Express threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":157,"@type":158,"name":159,"description":154,"url":160,"manufacturer":161,"applicationCategory":165,"softwareVersion":166,"mainEntity":167},"https:\u002F\u002Fschema.org","SoftwareApplication","Outlook Express","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Foutlook_express",{"@type":162,"name":163,"url":164},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","22 versions tracked",{"@type":168,"name":169,"description":170,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Outlook Express Security Vulnerabilities","Security vulnerabilities affecting Outlook Express by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":172,"apiVersion":173},"2026-10-17T18:25:33.871Z","3.0",{"rows":175,"total":11,"capped":17,"failed":11},[],[177],{"product":178,"cves":29},"outlook_express_book_control"]