Microsoft Outlook 2016 vulnerabilities

CVE-2026-21260 [HIGH] CWE-200 CVE-2026-21260: Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an una Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-49699 [HIGH] CWE-416 CVE-2025-49699: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47171 [MEDIUM] CWE-20 CVE-2025-47171: Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.

CVE-2025-21357 [MEDIUM] CWE-908 CVE-2025-21357: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability

CVE-2024-38173 [MEDIUM] CWE-73 CVE-2024-38173: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability

CVE-2024-38020 [MEDIUM] CWE-200 Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability

CVE-2024-30103 [HIGH] CWE-184 CVE-2024-30103: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability

CVE-2024-21378 [HIGH] CWE-94 CVE-2024-21378: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability

CVE-2023-36763 [HIGH] CWE-200 CVE-2023-36763: Microsoft Outlook Information Disclosure Vulnerability Microsoft Outlook Information Disclosure Vulnerability

CVE-2023-36893 [MEDIUM] CWE-20 Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability

CVE-2023-35311 [HIGH] CWE-367 CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability Microsoft Outlook Security Feature Bypass Vulnerability

CVE-2023-33151 [MEDIUM] Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability

CVE-2023-33131 [HIGH] CWE-94 CVE-2023-33131: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability

CVE-2022-35742 [HIGH] Microsoft Outlook Denial of Service Vulnerability Microsoft Outlook Denial of Service Vulnerability Microsoft Outlook Denial of Service Vulnerability

CVE-2023-23397 [CRITICAL] CWE-20 CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability Microsoft Outlook Elevation of Privilege Vulnerability

CVE-2021-31949 [HIGH] CWE-94 CVE-2021-31949: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability

CVE-2021-28452 [HIGH] Microsoft Outlook Memory Corruption Vulnerability Microsoft Outlook Memory Corruption Vulnerability Microsoft Outlook Memory Corruption Vulnerability

CVE-2020-17119 [MEDIUM] CVE-2020-17119: Microsoft Outlook Information Disclosure Vulnerability Microsoft Outlook Information Disclosure Vulnerability

CVE-2020-16949 [MEDIUM] CWE-401 CVE-2020-16949: <p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system. Exploitation of the vulnerability requires that a specially crafted email be sent to a vulnerable Outloo

CVE-2020-16947 [HIGH] CWE-125 CVE-2020-16947: <p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fail A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the targeted user. If the targeted user is logged on with administrative user rights, an attacker could take control