Microsoft Outlook.Com vulnerabilities
2 known vulnerabilities affecting microsoft/outlook.com.
Total CVEs
2
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2026-96951P1HIGHCVSS 8.8KEV≥ 1.0.0, < 20260925.1002026-10-13
CVE-2026-96951 [HIGH] CWE-77 CVE-2026-96951: Improper neutralization of special elements used in a command ('command injection') in Windows Shell
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2014-5239P4MEDIUMCVSS 4.0≤ 7.8.2.12.49.6434v7.8.2.10.47.7365+3 more2014-08-14
CVE-2014-5239 [MEDIUM] CWE-310 CVE-2014-5239: The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 cert
The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
nvd