CVE-2000-0621

High CVSS 7.5

Published 2000-07-20 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-2000-0621, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.

Sources

NVD record for CVE-2000-0621

CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P