CVE-2025-62562CWE-416

Microsoft Outlook Remote Code Execution Vulnerability

High · published December 9, 2025

CVSS v3.1
7.8
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

⚡ A little slip in Microsoft Outlook could let an unauthorized attacker run code locally! That's like leaving a restaurant door unlocked while you’re inside! 🔓 Think of it like a restaurant where the chef accidentally leaves the kitchen door open. Anyone walking by could just waltz in and start cooking up chaos without a reservation! If exploited, this vulnerability could allow an attacker to execute malicious code on your system, leading to data breaches, loss of sensitive information, or even full system compromise. It’s a high-stakes game that you don’t want to play!

Put simply

Think of it like a restaurant where the chef accidentally leaves the kitchen door open. Anyone walking by could just waltz in and start cooking up chaos without a reservation! This use-after-free vulnerability occurs when Outlook mishandles memory, allowing unauthorized code execution if exploited locally. This means that an ill-timed access of freed memory can give attackers a way in.

What to do

If exploited, this vulnerability could allow an attacker to execute malicious code on your system, leading to data breaches, loss of sensitive information, or even full system compromise. It’s a high-stakes game that you don’t want to play! To protect yourself, make sure to apply the latest security updates from Microsoft immediately. Regularly review your software to ensure no vulnerable versions are in use, and consider implementing additional monitoring. Stay vigilant! You’ve got this! Follow these steps and keep your systems secure. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00810 · 56.5th percentile
Weakness
CWE-416 · Use After Free
Published
2025-12-09T17:55Z
EPSS history
Timeline
  • 09 DEC 17:55Z
    Microsoft Outlook Remote Code Execution Vulnerability
    cvelistv5