High severity7.5NVD Advisory· Published Oct 13, 2017· Updated Jun 17, 2026

CVE-2017-11776

Description

Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka "Microsoft Outlook Information Disclosure Vulnerability."

Affected products

Microsoft/Outlook2 versions
cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*
- (no CPE)
Microsoft/Outlook 2016llm-create
Microsoft Corporation/Microsoft Outlookv5
Range: Microsoft Outlook 2016

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11776nvdPatchVendor Advisory
www.securityfocus.com/bid/101106nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039542nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.008
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000