Not rated
CVE-2019-1105 A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email…
Description
A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted email message to a victim. The attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on the affected systems and run scripts in the security context of the current user. The security update addresses the vulnerability by correcting how Outlook for Android parses specially crafted email messages.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Outlook for Android 1.0 | 1.0 → latest | No fix stated |
References
- Outlook for Android Spoofing Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Outlook for Android
The 9 CVEs of Microsoft Outlook for Android →
CVE-2026-26133
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network
7.1
High
CVE-2025-29805
Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to…
7.5
High
CVE-2025-21259
Microsoft Outlook Spoofing Vulnerability
5.3
Medium
CVE-2024-43604
Outlook for Android Elevation of Privilege Vulnerability
5.7
Medium