Overview 90 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 18 public PoC · 0 EPSS ≥ 0.5
90matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
18public PoC20.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
1.1%
Not applicable
89
98.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
90
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
17
18.9%
Proof of concept only
2
2.2%
Forecast only
0
0.0%
No public exploit
71
78.9%
split by
peak 9 / year
19996
Not applicable6
Medium6
not blocked6
Working exploit published3
No public exploit3
20008
Not applicable8
Medium8
not blocked8
Working exploit published3
No public exploit5
20012
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
20026
Outside Waratek scope1
Not applicable5
Medium6
not blocked6
Working exploit published3
No public exploit3
20033
Not applicable3
Medium3
not blocked3
No public exploit3
20049
Not applicable9
Medium9
not blocked9
Working exploit published3
No public exploit6
20054
Not applicable4
Medium4
not blocked4
No public exploit4
20066
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
20072
Not applicable2
Medium2
not blocked2
No public exploit2
20082
Not applicable2
Medium2
not blocked2
No public exploit2
20090
20102
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
20110
20120
20131
Not applicable1
Medium1
not blocked1
No public exploit1
20142
Not applicable2
Medium2
not blocked2
No public exploit2
20150
20162
Not applicable2
Medium2
not blocked2
No public exploit2
20175
Not applicable5
Medium5
not blocked5
No public exploit5
20184
Not applicable4
Medium4
not blocked4
No public exploit4
20196
Not applicable6
Medium6
not blocked6
No public exploit6
20203
Not applicable3
Medium3
not blocked3
Proof of concept only1
No public exploit2
20210
20223
Not applicable3
Medium3
not blocked3
No public exploit3
20232
Not applicable2
Medium2
not blocked2
No public exploit2
20245
Not applicable5
Medium5
not blocked5
Proof of concept only1
No public exploit4
20254
Not applicable4
Medium4
not blocked4
Working exploit published1
No public exploit3
20263
Not applicable3
Medium3
not blocked3
No public exploit3
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-80073 | Medium | 2026-09-08 | Not applicable | No public exploit | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62882 | Medium | 2026-08-11 | Not applicable | No public exploit | Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-59868 | Medium | 2026-06-27 | Not applicable | No public exploit | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown behavior in the application. |
| CVE-2024-42192 | Medium | 2025-10-16 | Not applicable | No public exploit | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage which could allow an attacker to access other computers or applications. |
| CVE-2025-47171 | Medium | 2025-06-10 | Not applicable | Working exploit published | Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally. |
| CVE-2025-21259 | Medium | 2025-02-11 | Not applicable | No public exploit | Microsoft Outlook Spoofing Vulnerability |
| CVE-2025-21357 | Medium | 2025-01-14 | Not applicable | No public exploit | Microsoft Outlook Remote Code Execution Vulnerability |
| CVE-2024-30133 | Medium | 2024-11-12 | Not applicable | No public exploit | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways. |
| CVE-2024-43482 | Medium | 2024-09-10 | Not applicable | No public exploit | Microsoft Outlook for iOS Information Disclosure Vulnerability |
| CVE-2024-38173 | Medium | 2024-08-13 | Not applicable | No public exploit | Microsoft Outlook Remote Code Execution Vulnerability |
| CVE-2024-38020 | Medium | 2024-07-09 | Not applicable | No public exploit | Microsoft Outlook Spoofing Vulnerability |
| CVE-2024-1187 | Medium | 2024-02-02 | Not applicable | Proof of concept only | A vulnerability, which was classified as problematic, has been found in Munsoft Easy Outlook Express Recovery 2.0. This issue affects some unknown processing of the component Registration Key Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-252677 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2023-32119 | Medium | 2023-08-23 | Not applicable | No public exploit | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPO365 | Mail Integration for Office 365 / Outlook plugin <= 1.9.0 versions. |
| CVE-2023-36893 | Medium | 2023-08-08 | Not applicable | No public exploit | Microsoft Outlook Spoofing Vulnerability |
| CVE-2022-24480 | Medium | 2022-12-13 | Not applicable | No public exploit | Outlook for Android Elevation of Privilege Vulnerability |
| CVE-2022-22304 | Medium | 2022-07-18 | Not applicable | No public exploit | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests. |
| CVE-2022-23280 | Medium | 2022-02-09 | Not applicable | No public exploit | Microsoft Outlook for Mac Security Feature Bypass Vulnerability |
| CVE-2020-1493 | Medium | 2020-08-17 | Not applicable | Proof of concept only | An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an attacker would have to attach a file as a link to an email. The email could then be shared with individuals that should not have access to the files, ignoring the default organizational setting. The security update addresses the vulnerability by correcting how Outlook handles file attachment links. |
| CVE-2020-0696 | Medium | 2020-02-11 | Not applicable | No public exploit | A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'. |
| CVE-2019-1460 | Medium | 2020-01-24 | Not applicable | No public exploit | A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages, aka 'Outlook for Android Spoofing Vulnerability'. |
| CVE-2019-1218 | Medium | 2019-08-14 | Not applicable | No public exploit | A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted email message to a victim. The attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on the affected systems and run scripts in the security context of the current user. The security update addresses the vulnerability by correcting how Outlook iOS parses specially crafted email messages. |
| CVE-2019-1204 | Medium | 2019-08-14 | Not applicable | No public exploit | An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages. An attacker who successfully exploited the vulnerability could attempt to force Outlook to load a local or remote message store (over SMB). To exploit the vulnerability, the attacker could send a specially crafted email to a victim. Outlook would then attempt to open a pre-configured message store contained in the email upon receipt of the email. This update addresses the vulnerability by ensuring Office fully validates incoming email formatting before processing message content. |
| CVE-2019-1105 | Medium | 2019-07-29 | Not applicable | No public exploit | A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted email message to a victim. The attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on the affected systems and run scripts in the security context of the current user. The security update addresses the vulnerability by correcting how Outlook for Android parses specially crafted email messages. |
| CVE-2019-1084 | Medium | 2019-07-15 | Not applicable | No public exploit | An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'. |
| CVE-2019-0560 | Medium | 2019-01-08 | Not applicable | No public exploit | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. |
| CVE-2019-0559 | Medium | 2019-01-08 | Not applicable | No public exploit | An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. |
| CVE-2018-8244 | Medium | 2018-06-14 | Not applicable | No public exploit | An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka "Microsoft Outlook Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Outlook. |
| CVE-2017-17689 | Medium | 2018-05-16 | Not applicable | No public exploit | The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. |
| CVE-2017-17688 | Medium | 2018-05-16 | Not applicable | No public exploit | The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification |
| CVE-2018-0850 | Medium | 2018-02-15 | Not applicable | No public exploit | Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of privilege vulnerability due to how the format of incoming message is validated, aka "Microsoft Outlook Elevation of Privilege Vulnerability". |
| CVE-2017-8572 | Medium | 2017-08-01 | Not applicable | No public exploit | Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows an information disclosure vulnerability due to the way that it discloses the contents of its memory, aka "Microsoft Office Outlook Information Disclosure Vulnerability". |
| CVE-2017-8545 | Medium | 2017-06-15 | Not applicable | No public exploit | A spoofing vulnerability exists in when Microsoft Outlook for Mac does not sanitize html properly, aka "Microsoft Outlook for Mac Spoofing Vulnerability". |
| CVE-2017-8508 | Medium | 2017-06-15 | Not applicable | No public exploit | A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka "Microsoft Office Security Feature Bypass Vulnerability". |
| CVE-2017-0207 | Medium | 2017-04-12 | Not applicable | No public exploit | Microsoft Outlook for Mac 2011 allows remote attackers to spoof web content via a crafted email with specific HTML tags, aka "Microsoft Browser Spoofing Vulnerability." |
| CVE-2017-0204 | Medium | 2017-04-12 | Not applicable | No public exploit | Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Protected View via a specially crafted document, aka "Microsoft Office Security Feature Bypass Vulnerability." |
| CVE-2016-3366 | Medium | 2016-09-14 | Not applicable | No public exploit | Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office Spoofing Vulnerability." |
| CVE-2016-0028 | Medium | 2016-06-16 | Not applicable | No public exploit | Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, aka "Microsoft Exchange Information Disclosure Vulnerability." |
| CVE-2014-5239 | Medium | 2014-08-14 | Not applicable | No public exploit | The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |
| CVE-2014-2510 | Medium | 2014-07-08 | Not applicable | No public exploit | The JAXB XML parser in EMC Documentum Foundation Services (DFS) 6.6 before P39, 6.7 SP1 before P28, and 6.7 SP2 before P15, as used in My Documentum for Desktop, My Documentum for Microsoft Outlook, and CenterStage, allows remote authenticated users to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. |
| CVE-2013-3905 | Medium | 2013-11-13 | Not applicable | No public exploit | Microsoft Outlook 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT does not properly expand metadata contained in S/MIME certificates, which allows remote attackers to obtain sensitive network configuration and state information via a crafted certificate in an e-mail message, aka "S/MIME AIA Vulnerability." |
| CVE-2010-3213 | Medium | 2010-09-07 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule. |
| CVE-2010-1568 | Medium | 2010-05-14 | Not applicable | No public exploit | The Send Secure functionality in the Cisco IronPort Desktop Flag Plug-in for Outlook before 6.5.0-006 does not properly handle simultaneously composed messages, which might allow remote attackers to obtain cleartext contents of e-mail messages that were intended to be encrypted, aka bug 65623. |
| CVE-2008-5424 | Medium | 2008-12-11 | Not applicable | No public exploit | The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (infinite loop) via a large e-mail message, a related issue to CVE-2006-1173. |
| CVE-2008-2248 | Medium | 2008-07-08 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified HTML, a different vulnerability than CVE-2008-2247. |
| CVE-2007-2227 | Medium | 2007-06-12 | Not applicable | No public exploit | The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability." |
| CVE-2007-2225 | Medium | 2007-06-12 | Not applicable | No public exploit | A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability." |
| CVE-2006-1305 | Medium | 2006-12-31 | Not applicable | No public exploit | Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers. |
| CVE-2006-6659 | Medium | 2006-12-20 | Not applicable | Working exploit published | The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (Internet Explorer 7 hang) via crafted HTML. |
| CVE-2006-2386 | Medium | 2006-12-13 | Not applicable | No public exploit | Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book (WAB) file. |
| CVE-2006-2111 | Medium | 2006-05-01 | Not applicable | Working exploit published | A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability." |
| CVE-2006-2055 | Medium | 2006-04-26 | Not applicable | No public exploit | Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API. |
| CVE-2006-0014 | Medium | 2006-04-12 | Not applicable | No public exploit | Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values. |
| CVE-2005-4840 | Medium | 2005-12-31 | Not applicable | No public exploit | The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL dereference and browser crash) by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer. |
| CVE-2005-2226 | Medium | 2005-07-12 | Not applicable | No public exploit | Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information. |
| CVE-2005-1052 | Medium | 2005-05-02 | Not applicable | No public exploit | Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses. |
| CVE-2005-0921 | Medium | 2005-05-02 | Not applicable | No public exploit | Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy. |
| CVE-2004-2694 | Medium | 2004-12-31 | Not applicable | No public exploit | Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top". |
| CVE-2004-2482 | Medium | 2004-12-31 | Not applicable | No public exploit | Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code. |
| CVE-2004-2137 | Medium | 2004-12-31 | Not applicable | No public exploit | Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information. |
| CVE-2004-0284 | Medium | 2004-11-23 | Not applicable | No public exploit | Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name. |
| CVE-2004-0503 | Medium | 2004-08-18 | Not applicable | No public exploit | Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502. |
| CVE-2004-0502 | Medium | 2004-08-18 | Not applicable | Working exploit published | Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI. |
| CVE-2004-0501 | Medium | 2004-08-18 | Not applicable | Working exploit published | Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) entity whose src parameter points to the remote site, which could allow remote attackers to know when a message has been read, verify valid e-mail addresses, and possibly leak other information. |
| CVE-2004-0526 | Medium | 2004-08-06 | Not applicable | Working exploit published | Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack. |
| CVE-2004-0215 | Medium | 2004-08-06 | Not applicable | No public exploit | Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header. |
| CVE-2003-0301 | Medium | 2003-06-16 | Not applicable | No public exploit | The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors. |
| CVE-2003-0300 | Medium | 2003-06-16 | Not applicable | No public exploit | The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors. |
| CVE-2003-0007 | Medium | 2003-02-07 | Not applicable | No public exploit | Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure." |
| CVE-2002-2164 | Medium | 2002-12-31 | Not applicable | Working exploit published | Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HREF> link. |
| CVE-2002-2100 | Medium | 2002-12-31 | Not applicable | No public exploit | Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content. |
| CVE-2002-1255 | Medium | 2002-12-18 | Not applicable | No public exploit | Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail." |
| CVE-2002-0862 | Medium | 2002-10-04 | Not applicable | Working exploit published | The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS. |
| CVE-2002-0659 | Medium | 2002-08-12 | Outside Waratek scope | Working exploit published | The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. |
| CVE-2002-0481 | Medium | 2002-08-12 | Not applicable | No public exploit | An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows Media Skin) or other WMP media files, whose onload handlers execute the player.LaunchURL() Javascript function. |
| CVE-2001-0945 | Medium | 2001-12-03 | Not applicable | No public exploit | Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line. |
| CVE-2001-0322 | Medium | 2001-06-02 | Not applicable | Working exploit published | MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is associated with the browser window object. |
| CVE-2000-0756 | Medium | 2000-10-20 | Not applicable | No public exploit | Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service. |
| CVE-2000-0753 | Medium | 2000-10-20 | Not applicable | No public exploit | The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (RTF) files. |
| CVE-2000-0653 | Medium | 2000-07-20 | Not applicable | Working exploit published | Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability. |
| CVE-2000-0567 | Medium | 2000-07-18 | Not applicable | Working exploit published | Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability. |
| CVE-2000-0524 | Medium | 2000-06-05 | Not applicable | No public exploit | Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From. |
| CVE-2000-0415 | Medium | 2000-05-12 | Not applicable | No public exploit | Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name. |
| CVE-2000-0216 | Medium | 2000-02-29 | Not applicable | No public exploit | Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list. |
| CVE-2000-0105 | Medium | 2000-02-01 | Not applicable | Working exploit published | Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client. |
| CVE-2000-0036 | Medium | 1999-12-22 | Not applicable | No public exploit | Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability. |
| CVE-2000-0329 | Medium | 1999-11-11 | Not applicable | Working exploit published | A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability. |
| CVE-1999-1016 | Medium | 1999-08-27 | Not applicable | Working exploit published | Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell. |
| CVE-1999-1164 | Medium | 1999-06-25 | Not applicable | No public exploit | Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang. |
| CVE-1999-1033 | Medium | 1999-05-11 | Not applicable | Working exploit published | Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang. |
| CVE-1999-0384 | Medium | 1999-01-01 | Not applicable | No public exploit | The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content. |