cbcvebase.

Microsoft Outlook 2016 vulnerabilities

30 known vulnerabilities affecting microsoft/microsoft_outlook_2016.

Total CVEs
30
CISA KEV
2
actively exploited
Public exploits
3
Exploited in wild
2
Severity breakdown
CRITICAL1HIGH19MEDIUM10

Vulnerabilities

Page 2 of 2
CVE-2024-38173P4MEDIUMCVSS 6.7≥ 16.0.0.0, < 16.0.5461.10012024-08-13
CVE-2024-38173 [MEDIUM] CWE-73 CVE-2024-38173: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability
nvd
CVE-2025-21357P4MEDIUMCVSS 6.7≥ 16.0.0.0, < 16.0.5483.10002025-01-14
CVE-2025-21357 [MEDIUM] CWE-908 CVE-2025-21357: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability
nvd
CVE-2020-1493P4MEDIUMCVSS 5.5≥ 16.0.0.0, < publication2020-08-17
CVE-2020-1493 [MEDIUM] CWE-922 CVE-2020-1493: An information disclosure vulnerability exists when attaching files to Outlook messages. This vulner An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an attacker would have to attach a file as a link to an emai
nvd
CVE-2026-62882P4MEDIUMCVSS 4.3≥ 16.0.0.0, < 16.0.5565.10002026-08-11
CVE-2026-62882 [MEDIUM] CWE-522 CVE-2026-62882: Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2019-1204P4MEDIUMCVSS 4.3≥ 16.0.0.0, < publication2019-08-14
CVE-2019-1204 [MEDIUM] CWE-20 CVE-2019-1204: An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incomi An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages. An attacker who successfully exploited the vulnerability could attempt to force Outlook to load a local or remote message store (over SMB). To exploit the vulnerability, the att
nvd
CVE-2022-35742HIGHCVSS 7.5≥ 16.0.0.0, < 16.0.4966.10002023-06-01
CVE-2022-35742 [HIGH] Microsoft Outlook Denial of Service Vulnerability Microsoft Outlook Denial of Service Vulnerability Microsoft Outlook Denial of Service Vulnerability
cvelistv5
CVE-2023-33151MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.5404.10002023-07-11
CVE-2023-33151 [MEDIUM] Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability
cvelistv5
CVE-2021-28452HIGHCVSS 7.1≥ 16.0.0.0, < publication2021-04-13
CVE-2021-28452 [HIGH] Microsoft Outlook Memory Corruption Vulnerability Microsoft Outlook Memory Corruption Vulnerability Microsoft Outlook Memory Corruption Vulnerability
cvelistv5
CVE-2023-36893MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.5408.10002023-08-08
CVE-2023-36893 [MEDIUM] CWE-20 Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability
cvelistv5
CVE-2024-38020MEDIUMCVSS 6.5≥ 16.0.0.0, < 16.0.5456.10002024-07-09
CVE-2024-38020 [MEDIUM] CWE-200 Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability
cvelistv5