CVE-2017-11776

—

CVSS 3.0

7.5 high

EPSS

9%p95

Published

Oct 13, 2017 (Oct 13, 2017)

Modified

Jun 17, 2026

Description

Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka "Microsoft Outlook Information Disclosure Vulnerability."

Vendors: microsoft
Products: outlook
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (9.4%)

In the news4 stories

Buggy Microsoft Outlook Sending Encrypted S/MIME Emails With Plaintext Copy For Months

The Hacker NewsOct 12, 08:58 UTC · Oct 12, 2017Exploit / PoC CVE-2017-11776

CVE-2017-11776

In the news4 stories

Buggy Microsoft Outlook Sending Encrypted S/MIME Emails With Plaintext Copy For Months

Microsoft’s October Patch Batch Fixes 62 Flaws

Microsoft Issues Patches For Severe Flaws, Including Office Zero

Microsoft Patch Tuesday