Microsoft Outlook
- Known vulnerabilities
- 9
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- 7.5
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Known vulnerabilities (CVE)
Latest matched CVE: 2026
Test a different version
| CVE |
|---|
|
CVE-2026-26133
Fixed
HIGH 7.1
Network Fixed in: 5.2605.0
|
|
CVE-2025-29805
Fixed
HIGH 7.5
Network Fixed in: 4.2509.0
|
|
CVE-2025-21259
Fixed
MEDIUM 5.3
Network Fixed in: 4.2501.1
|
|
CVE-2024-26204
Fixed
HIGH 7.5
Network Fixed in: 4.2404.0
|
5 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Security Score
Excellent
Composite: 50% open CVEs + 40% open KEVs + 10% vendor velocity.
-
Open CVEs 0/-50
0 CVEs
-
Open KEVs 0/-40
0 KEVs
-
Vendor 0/-10
100% fresh
Context
Context
Description
Stay on top of multiple accounts with emails, calendars & contacts in one place
Data collected and shared
Source: Play Store Data Safety · 18 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
Other apps by this publisher
Apps published by Microsoft Corporation
com.microsoft.emmxmsstore:9WZDNCRFJBBGcom.microsoft.crm.crmphonecom.microsoft.crm.crmphone.salesmsstore:9PMMSR1CGPWGcom.microsoft.LinkToWindowsFAQ
FAQ: Microsoft Outlook
Does Microsoft Outlook have known security vulnerabilities?
Microsoft Outlook (com.microsoft.office.outlook) on Android has 9 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of Microsoft Outlook affected by any open CVE?
Version 5.2630.0 of Microsoft Outlook on Android has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is Microsoft Outlook affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting Microsoft Outlook (com.microsoft.office.outlook) is currently in the CISA KEV catalog.
What is the latest known version of Microsoft Outlook?
The most recent version of Microsoft Outlook (com.microsoft.office.outlook) tracked by Appaloosa Scout is 5.2630.0, published by Microsoft Corporation.