GCVE - cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:*:*:*

part: a version: 2013 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Outlook (`bef301cd-241a-53cf-ae40-2970e33f8d57`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-0850`	vulnerable	2026-06-08 05:10:24.936517	Details available Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of privilege vulnerability due to how the format of incoming message is validated, aka "Microsoft Outlook Elevation of Privilege Vulnerability". Published: 2018-02-15T02:00:00.000Z Updated: 2024-09-17T02:58:20.209Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0850 http://www.securitytracker.com/id/1040382 http://www.securityfocus.com/bid/102866	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-17689`	vulnerable	2026-06-08 05:09:09.749701	Details available The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. Published: 2018-05-16T19:00:00.000Z Updated: 2024-08-05T20:59:17.441Z Open on db.gcve.eu Reference links https://news.ycombinator.com/item?id=17066419 https://pastebin.com/gNCc8aYm http://www.securityfocus.com/bid/104165 https://twitter.com/matthew_d_green/status/996371541591019520 https://efail.de	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3905`	vulnerable	2026-06-08 05:04:33.165133	Details available Microsoft Outlook 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT does not properly expand metadata contained in S/MIME certificates, which allows remote attackers to obtain sensitive network configuration and state information via a crafted certificate in an e-mail message, aka "S/MIME AIA Vulnerability." Published: 2013-11-13T00:00:00.000Z Updated: 2024-08-06T16:22:01.630Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-094 http://www.us-cert.gov/ncas/alerts/TA13-317A https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19239	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.