Microsoft Corp Microsoft Outlook 2016

Name: Microsoft Corp Microsoft Outlook 2016
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical17high14medium0low

updated 2026-10-27

vulnerabilities (47)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-23397US	critical9.8OT critical	97.2% (100th)	KEV	no fix	2023-03-14	—
CVE-2020-16947US	high9.3	33.7% (98th)	Exploit	no fix	2020-10-16	—
CVE-2018-8587US	high7.8	28.8% (98th)	Exploit	no fix	2018-12-12	—
CVE-2017-0106US	high7.8	28.4% (98th)	Exploit	no fix	2017-04-12	—
CVE-2017-0204US	medium5.5	19.0% (97th)	Exploit	no fix	2017-04-12	—
CVE-2024-21378US	—	11.0% (96th)	Exploit	no fix	2024-02-13	—
CVE-2020-1493US	medium5.5	7.30% (94th)	Exploit	no fix	2020-08-17	—
CVE-2023-33131US	—	5.72% (93rd)	Exploit	no fix	2023-06-14	—
CVE-2025-47171US	—	1.68% (77th)	Exploit	no fix	2025-06-10	—
CVE-2017-8506US	high7.8	24.2% (98th)	—	no fix	2017-06-15	—
CVE-2022-35742US	—	22.3% (98th)	—	no fix	2023-06-01	—
CVE-2018-0791US	high7.8	20.6% (98th)	—	no fix	2018-01-10	—
CVE-2016-3278US	high7.8	20.4% (97th)	—	no fix	2016-07-13	—
CVE-2017-8507US	high7.8	19.6% (97th)	—	no fix	2017-06-15	—
CVE-2018-0852US	high8.8	19.4% (97th)	—	no fix	2018-02-15	—
CVE-2018-0851US	high8.8	19.1% (97th)	—	no fix	2018-02-15	—
CVE-2018-8576US	high7.8	19.1% (97th)	—	no fix	2018-11-14	—
CVE-2018-8524US	high7.8	19.1% (97th)	—	no fix	2018-11-14	—
CVE-2018-8522US	high7.8	19.1% (97th)	—	no fix	2018-11-14	—
CVE-2018-8582US	high8.8	18.6% (97th)	—	no fix	2018-11-14	—
CVE-2016-3366US	medium6.5	16.2% (97th)	—	no fix	2016-09-14	—
CVE-2020-1483US	high9.3	8.84% (95th)	—	no fix	2020-08-17	—
CVE-2020-0760US	high8.8	8.82% (95th)	—	no fix	2020-04-15	—
CVE-2019-0559US	medium6.5	6.78% (94th)	—	no fix	2019-01-08	—
CVE-2019-1084US	medium6.5	5.33% (93rd)	—	no fix	2019-07-15	—
CVE-2020-0696US	medium6.5	4.99% (92nd)	—	no fix	2020-02-11	—
CVE-2019-1200US	high7.8	4.65% (92nd)	—	no fix	2019-08-14	—
CVE-2019-1204US	medium4.3	4.42% (91st)	—	no fix	2019-08-14	—
CVE-2020-17119US	medium5.0	4.02% (91st)	—	no fix	2020-12-10	—
CVE-2024-30103US	—	3.42% (89th)	—	no fix	2024-06-11	—
CVE-2023-33151US	—	3.40% (89th)	—	no fix	2023-07-11	—
CVE-2020-16949US	medium5.0	2.97% (87th)	—	no fix	2020-10-16	—
CVE-2021-31941US	medium6.8	2.93% (87th)	—	no fix	2021-06-08	—
CVE-2021-31949US	medium6.8	2.57% (85th)	—	no fix	2021-06-08	—
CVE-2022-23280US	medium5.0	2.44% (84th)	—	no fix	2022-02-09	—
CVE-2021-31940US	medium6.8	2.25% (83rd)	—	no fix	2021-06-08	—
CVE-2023-36893US	—	2.19% (82nd)	—	no fix	2023-08-08	—
CVE-2023-36763US	—	2.12% (82nd)	—	no fix	2023-09-12	—
CVE-2024-38020US	—	1.84% (79th)	—	no fix	2024-07-09	—
CVE-2026-21260US	—	1.52% (74th)	—	no fix	2026-02-10	≤ 16.0.5539.1002
CVE-2021-28452US	medium6.8	1.29% (70th)	—	no fix	2021-04-13	—
CVE-2026-78519US	high8.8	0.82% (57th)	—	no fix	2026-09-08	≤ 16.0.5569.1000
CVE-2026-70329US	—	0.82% (57th)	—	no fix	2026-08-11	≤ 16.0.5565.1000
CVE-2024-38173US	—	0.66% (52nd)	—	no fix	2024-08-13	—
CVE-2025-21357US	—	0.59% (48th)	—	no fix	2025-01-14	—
CVE-2025-49699US	—	0.38% (32nd)	—	no fix	2025-07-08	—

showing 46 of 47

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer15 CVEs
CWE-20Improper Input Validation10 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-284Improper Access Control3 CVEs
CWE-264CWE-2642 CVEs
CWE-416Use After Free2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan