Microsoft Microsoft Outlook for Android
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-26133 | | M365 Copilot Information Disclosure Vulnerability | HIGH 7.1 | 0.4 % | ||
| CVE-2025-29805 | 1.0 – < 4.2509.0 | Outlook for Android Information Disclosure Vulnerability | HIGH 7.5 | 1.6 % | ||
| CVE-2025-21259 | 1.0 – < 4.2501.1 | Microsoft Outlook Spoofing Vulnerability | MEDIUM 5.3 | 1.2 % | ||
| CVE-2024-43604 | 1.0 – < 4.2435.2 | Outlook for Android Elevation of Privilege Vulnerability | HIGH 8.0 | 1.2 % | ||
| CVE-2024-26204 | 1.0 – < 4.2404.0 | Outlook for Android Information Disclosure Vulnerability | HIGH 7.5 | 2.1 % | ||
| CVE-2022-24480 | 1.0 – < Publication | Outlook for Android Elevation of Privilege Vulnerability | MEDIUM 6.3 | 0.6 % | ||
| CVE-2019-1460 | unspecified | A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages, aka 'Outlook f | MEDIUM 4.6 | 1.4 % | ||
| CVE-2019-1105 | 1.0 – < Publication | Outlook for Android Spoofing Vulnerability | MEDIUM 5.4 | 1.8 % | ||
| CVE-2019-1084 | | An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. | MEDIUM 6.5 | 5.3 % |