Microsoft Outlook vulnerability may have exposed emails in plaintext for over a decade

A security vulnerability in Microsoft Outlook, potentially present since 2007, has been reported to silently downgrade secure SSL/TLS connections to unencrypted plaintext. This issue, discovered after a mail server upgrade, affects Outlook versions 2007 through 2016 and possibly later, leading users to believe their emails were encrypted when they were not. The vulnerability is triggered by specific POP3 configurations, and a simple mitigation involves ensuring the correct port (995) is used for POP3 connections. AI

IMPACT This vulnerability could expose sensitive user data, potentially impacting trust in email security protocols and software.

RANK_REASON Discovery of a long-standing, high-impact security vulnerability in a widely used software product. [lever_c_demoted from significant: ic=1 ai=0.4]

Read on Tom's Hardware →

• EU GDPR
• Fedora
• Marius World
• Microsoft Outlook
• POP3

• safety
• product

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →