Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2023-35311KEV | 8.8 high | 16.0% | microsoft, 365_apps, office_2019, office_2021 | Microsoft Outlook Security Feature Bypass Vulnerability | 8 Oct |
| CVE-2026-96951KEVexploited | 8.8 high | 10.0% | microsoft, outlook_web, windows_10_1607, windows_10_1809 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | 16 Oct |
| CVE-2023-35636exploit | 6.5 medium | 18.0% | microsoft, 365_apps, office, office_long_term_servicing_channel | Microsoft Outlook Information Disclosure Vulnerability | 8 Oct |
| CVE-2018-0851 | 8.8 high | 19.0% | microsoft, office, office_word_viewer, outlook | Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852. | 15 Oct |
| CVE-2026-70242 | 9.8 critical | 2.0% | microsoft, 365_apps, office_2021, office_2024 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-88156 | 9.8 critical | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-70291 | 9.8 critical | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97016 | 9.8 critical | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97749 | 9.8 critical | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-70329 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 5 h ago |
| CVE-2026-70256 | 8.8 high | 1.0% | microsoft, 365_apps, office_2024 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-70257 | 8.8 high | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-70282 | 8.8 high | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97012 | 8.8 high | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-70281 | 7.5 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | 15 Oct |
| CVE-2026-55145 | 7.1 high | 1.0% | microsoft, copilot | Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network. | Sat 24 Oct |
| CVE-2026-62882 | 4.3 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 | Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. | 5 h ago |
| CVE-2026-112357 | 8.5 high | — | no CPE yet | GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can replace the searchd.exe service binary used by the bundled KOFFIndexingService, which runs as LocalSystem, to execute arbitrary code with NT AUTHORITY\SYSTEM privileges upon the next service start or reboot. | 10 h ago |
| CVE-2026-100208 | 8.1 high | 0.00% | microsoft, 365_apps, office_2021, office_2024 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 4 h ago |
| CVE-2026-63518 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2023-37524 | 7.8 high | 0.00% | hcltech, traveler_for_microsoft_outlook | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service. Since .NET Framework 4.5 has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses through vulnerable third-party components. | 6 h ago |
| CVE-2026-42893 | 7.5 high | 0.00% | microsoft, outlook | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network. | Mon 26 Oct |
| CVE-2026-108448 | 7.5 high | 0.00% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-41576 | 7.1 high | 0.00% | no CPE yet | Brave CMS is an open-source CMS. Prior to commit 6c56603, the contact form is publicly accessible (no authentication required). User-supplied message text is passed through PHP's nl2br() function, which converts newlines to <br> tags but does not escape HTML. The resulting string is then passed to a Blade email template using the unescaped {!! $msg !!} directive. The resulting content is then rendered in a Blade email template using the unescaped {!! $msg !!} directive. Because HTML is not sanitized, arbitrary markup can be injected into the email body. While modern HTML-capable email clients (Gmail or Outlook Web) typically block JavaScript execution, they still render HTML content. This allows attackers to craft convincing phishing interfaces inside the email sent to the administrator. This issue has been patched via commit 6c56603. | Mon 26 Oct |
| CVE-2026-118641 | 6.9 medium | — | no CPE yet | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection vulnerability in the Microsoft Outlook contact lookup and Microsoft SharePoint v1 item update nodes, which build $filter string literals from expression-bindable parameters without escaping. Attackers who supply untrusted input to such workflows can inject single quotes to dump the bound mailbox's entire contact list or redirect SharePoint writes onto unintended list items within the stored credential's scope. | 6 h ago |
| CVE-2026-21770 | 6.5 medium | 0.00% | no CPE yet | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content. | Sat 24 Oct |
| CVE-2026-61280 | 6.3 medium | 0.00% | oracle, sales_for_handhelds | Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Outlook Sync Win 32). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales for Handhelds. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Sales for Handhelds accessible data as well as unauthorized read access to a subset of Oracle Sales for Handhelds accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Sales for Handhelds. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). | Sat 24 Oct |
27 of 27
Download these 27 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.