PatchTheCVEoutlook vulnerabilities and fixes
Recent CVEs affecting outlook, with upgrade or downgrade steps. 6 tracked.
outlook has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-09-08. Highest priority: CVE-2026-69629 (score 50/100).
- CVE-2026-42893 HIGH 7.4 UPGRADE Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an
- CVE-2026-69629 HIGH 8.8 MITIGATE MITIGATE Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a
- CVE-2026-78519 HIGH 8.8 MITIGATE MITIGATE Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over
- CVE-2026-80073 MEDIUM 6.5 MITIGATE MITIGATE Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a
- CVE-2026-62882 MEDIUM 4.3 MITIGATE MITIGATE Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform sp
- CVE-2026-70329 HIGH 8.8 MITIGATE MITIGATE Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code ove
FAQ
How do I fix outlook vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is outlook being exploited right now?
None of the tracked outlook CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which outlook CVE should I patch first?
CVE-2026-69629 currently ranks highest (50/100): Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a .