OU
Product
Outlook.com
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
2
CVEs
1
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add Outlook.com to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-96951
In wildKEV
8.8
10%
Oct 13
Windows Shell Security Feature Bypass Vulnerability
Affected: 1.0.0 before 20260925.100
CVE-2014-5239
–
3%
Aug 14
The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof…
Affected: through 7.8.2.12.49.6434; 7.8.2.10.47.7365; 7.8.2.11.48.4848; 7.8.2.12.49.0430; 7.8.2.12.49.5701
Showing 2