Microsoft Outlook 2016 vulnerabilities

3 known vulnerabilities in Microsoft Outlook 2016 from Microsoft. 3 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Microsoft 365 Apps for Enterprise: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-21260Feb 10, 2026MicrosoftEPSS 1.5%

  Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

• 7.5 High severity

  Microsoft Outlook Security Feature Bypass Exploited

  CVE-2023-35311Jul 11, 2023MicrosoftEPSS 15.5%

  Microsoft Outlook Security Feature Bypass Vulnerability

• 9.8 Critical severity

  Microsoft Office Outlook Privilege Escalation Exploited

  CVE-2023-23397Mar 14, 2023MicrosoftEPSS 97.2%

  Microsoft Outlook Elevation of Privilege Vulnerability