VendorsMicrosoftoutlook2016
Vulnerabilities

Microsoft Outlook 2016

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

58CVEs
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
Published 2023-03-14 · Analyzed
9.8KEVEPSS 0.972
CVE-2020-16947
Microsoft Outlook Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
9.3EPSS 0.338
CVE-2017-0106
Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Published 2017-04-12 · Modified
9.3EPSS 0.284
CVE-2017-8506
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, and CVE-2017-0260.
Published 2017-06-15 · Modified
9.3EPSS 0.242
CVE-2018-0791
Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, and Microsoft Outlook 2016 allow a remote code execution vulnerability due to the way email messages are parsed, aka "Microsoft Outlook Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0793.
Published 2018-01-10 · Modified
9.3EPSS 0.206
CVE-2016-3278
Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Published 2016-07-13 · Modified
9.3EPSS 0.204
CVE-2017-8663
Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote code execution vulnerability due to the way Microsoft Outlook parses specially crafted email messages, aka "Microsoft Office Outlook Memory Corruption Vulnerability"
Published 2017-08-01 · Modified
9.3EPSS 0.201
CVE-2017-8507
A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Office Memory Corruption Vulnerability".
Published 2017-06-15 · Modified
9.3EPSS 0.196
CVE-2018-0852
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Outlook handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0851.
Published 2018-02-15 · Modified
9.3EPSS 0.194
CVE-2018-0851
Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.
Published 2018-02-15 · Modified
9.3EPSS 0.191
CVE-2018-8522
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8524, CVE-2018-8576, CVE-2018-8582.
Published 2018-11-14 · Modified
9.3EPSS 0.191
CVE-2018-8524
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8576, CVE-2018-8582.
Published 2018-11-14 · Modified
9.3EPSS 0.191
CVE-2018-8576
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8582.
Published 2018-11-14 · Modified
9.3EPSS 0.191
CVE-2018-8582
A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8576.
Published 2018-11-14 · Modified
9.3EPSS 0.186
CVE-2020-1483
Microsoft Outlook Memory Corruption Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.088
CVE-2019-1200
Microsoft Outlook Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.3EPSS 0.046
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
Published 2023-07-11 · Analyzed
8.8KEVEPSS 0.155
CVE-2024-21378
Microsoft Outlook Remote Code Execution Vulnerability
Published 2024-02-13 · Modified
8.8EPSS 0.110
CVE-2020-0760
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.
Published 2020-04-15 · Modified
8.8EPSS 0.088
CVE-2023-33131
Microsoft Outlook Remote Code Execution Vulnerability
Published 2023-06-13 · Modified
8.81 PoCEPSS 0.057
CVE-2024-30103
Microsoft Outlook Remote Code Execution Vulnerability
Published 2024-06-11 · Modified
8.8EPSS 0.034
CVE-2026-78519
Microsoft Office Outlook Remote Code Execution Vulnerability
Published 2026-09-08 · Analyzed
8.8EPSS 0.008
CVE-2026-69629
Microsoft Office Outlook Remote Code Execution Vulnerability
Published 2026-09-08 · Analyzed
8.8EPSS 0.008
CVE-2026-70329
Microsoft Outlook Remote Code Execution Vulnerability
Published 2026-08-11 · Analyzed
8.8EPSS 0.008
CVE-2024-43604
Outlook for Android Elevation of Privilege Vulnerability
Published 2024-10-08 · Analyzed
8.0EPSS 0.012
CVE-2017-11774
Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."
Published 2017-10-13 · Analyzed
7.8KEVEPSS 0.596
CVE-2020-1349
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.
Published 2020-07-14 · Modified
7.8EPSS 0.224
CVE-2017-8571
Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security feature bypass vulnerability due to the way that it handles input, aka "Microsoft Office Outlook Security Feature Bypass Vulnerability".
Published 2017-08-01 · Modified
7.8EPSS 0.058
CVE-2021-31949
Microsoft Outlook Remote Code Execution Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.026
CVE-2021-28452
Microsoft Outlook Memory Corruption Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.013
CVE-2022-35742
Microsoft Outlook Denial of Service Vulnerability
Published 2023-06-01 · Modified
7.5EPSS 0.223
CVE-2017-11776
Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka "Microsoft Outlook Information Disclosure Vulnerability."
Published 2017-10-13 · Modified
7.5EPSS 0.094
CVE-2020-17119
Microsoft Outlook Information Disclosure Vulnerability
Published 2020-12-09 · Modified
7.5EPSS 0.040
CVE-2020-16949
Microsoft Outlook Denial of Service Vulnerability
Published 2020-10-16 · Modified
7.5EPSS 0.030
CVE-2023-36763
Microsoft Outlook Information Disclosure Vulnerability
Published 2023-09-12 · Modified
7.5EPSS 0.021
CVE-2026-21260
Microsoft Outlook Spoofing Vulnerability
Published 2026-02-10 · Analyzed
7.5EPSS 0.015
CVE-2025-49699
Microsoft Office Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
7.0EPSS 0.003
CVE-2025-47171
Microsoft Outlook Remote Code Execution Vulnerability
Published 2025-06-10 · Analyzed
6.71 PoCEPSS 0.017
CVE-2024-38173
Microsoft Outlook Remote Code Execution Vulnerability
Published 2024-08-13 · Analyzed
6.7EPSS 0.007
CVE-2025-21357
Microsoft Outlook Remote Code Execution Vulnerability
Published 2025-01-14 · Analyzed
6.7EPSS 0.006
1 / 2Next →