CVE-2017-8545

MEDIUM

Microsoft Outlook - Improper Input Validation

Title source: rule

Description

A spoofing vulnerability exists in when Microsoft Outlook for Mac does not sanitize html properly, aka "Microsoft Outlook for Mac Spoofing Vulnerability".

References (3)

Scores

CVSS v3 6.5
EPSS 0.1306
EPSS Percentile 94.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

CWE
CWE-20
Status published
Products (2)
microsoft/outlook
Microsoft Corporation/Microsoft Outlook for Mac < Microsoft Outlook 2016 for Mac.
Published Jun 15, 2017
Tracked Since Feb 18, 2026