CVE-2026-80084
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
Out-of-bounds read in Microsoft Office Outlook. An unauthorized attacker can disclose information over a network.
Risk Assessment
Risk of disclosing data from memory, potentially including email content and other confidential information.
Recommendation
Update Microsoft Office Outlook to a version with security fixes.
Other vulnerabilities in Microsoft Office Outlook
See all- CVE-2026-97749Critical
Microsoft Office Outlook is affected by a double free vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-97016Critical
Microsoft Office Outlook is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-88156Critical
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70291Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70242Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78509Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-108448High
A heap-based buffer overflow in Microsoft Office Outlook allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.
- CVE-2026-97012High
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70282High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70281High
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS