Unrated severityNVD Advisory· Published Aug 14, 2014· Updated Jun 17, 2026
CVE-2014-5239
CVE-2014-5239
Description
The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:microsoft:outlook.com:7.8.2.10.47.7365:*:*:*:*:android:*:*+ 5 more
- cpe:2.3:a:microsoft:outlook.com:7.8.2.10.47.7365:*:*:*:*:android:*:*
- cpe:2.3:a:microsoft:outlook.com:7.8.2.11.48.4848:*:*:*:*:android:*:*
- cpe:2.3:a:microsoft:outlook.com:7.8.2.12.49.0430:*:*:*:*:android:*:*
- cpe:2.3:a:microsoft:outlook.com:7.8.2.12.49.5701:*:*:*:*:android:*:*
- cpe:2.3:a:microsoft:outlook.com:*:*:*:*:*:android:*:*range: <=7.8.2.12.49.6434
- (no CPE)range: <7.8.2.12.49.7090
Patches
Vulnerability mechanics
References
3- jvn.jp/en/jp/JVN72950786/index.htmlnvdVendor Advisory
- jvndb.jvn.jp/jvndb/JVNDB-2014-000086nvdVendor Advisory
- www.securitytracker.com/id/1030733nvd
News mentions
0No linked articles in our index yet.