CVE-2017-11776

CVSS 3.0: 7.5 high
EPSS: 9%p95
Published: Oct 13, 2017 · Oct 13, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-11776 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka "Microsoft Outlook Information Disclosure Vulnerability."

Vendors: microsoft

Products: outlook

Weakness: CWE-200

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (9.4%)

In the news

4 stories

Buggy Microsoft Outlook Sending Encrypted S/MIME Emails With Plaintext Copy For Months

The Hacker NewsOct 12, 08:58 UTC · Oct 12, 2017Exploit / PoCCVE-2017-117761

Description · NVD

In the news

Buggy Microsoft Outlook Sending Encrypted S/MIME Emails With Plaintext Copy For Months

Microsoft’s October Patch Batch Fixes 62 Flaws

Microsoft Issues Patches For Severe Flaws, Including Office Zero

Microsoft Patch Tuesday