GCVE - cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Outlook (`bef301cd-241a-53cf-ae40-2970e33f8d57`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-42220`	vulnerable	2026-06-08 06:43:56.315537	Details available HIGH (7.1) A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions. Published: 2024-12-18T22:40:41.427Z Updated: 2024-12-19T16:44:19.193Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2024-1972	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-20670`	vulnerable	2026-06-08 06:27:30.162646	Outlook for Windows Spoofing Vulnerability HIGH (8.1) Outlook for Windows Spoofing Vulnerability Published: 2024-04-09T17:01:24.844Z Updated: 2025-05-03T00:40:26.557Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20670	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4040`	vulnerable	2026-06-08 04:49:55.587193	Details available Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670. Published: 2007-07-27T22:00:00.000Z Updated: 2025-04-03T14:27:23.595Z Open on db.gcve.eu Reference links http://larholm.com/2007/07/25/mozilla-protocol-abuse/ http://seclists.org/fulldisclosure/2007/Jul/0557.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6659`	vulnerable	2026-06-08 04:49:29.439964	Details available The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (Internet Explorer 7 hang) via crafted HTML. Published: 2006-12-20T02:00:00.000Z Updated: 2024-09-16T18:59:10.725Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/21649 http://shinnai.altervista.org/viewtopic.php?id=41&t_id=8 http://securitytracker.com/id?1017397	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0538`	vulnerable	2026-06-08 04:45:20.453319	Details available Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page. Published: 2002-03-09T05:00:00.000Z Updated: 2024-08-08T04:21:38.671Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=99496431214078&w=2 http://www.securityfocus.com/bid/3025 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-038 https://exchange.xforce.ibmcloud.com/vulnerabilities/6831 http://www.ciac.org/ciac/bulletins/l-113.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0216`	vulnerable	2026-06-08 04:44:58.421801	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0160`	vulnerable	2026-06-08 04:44:58.406866	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.