Remote Code Execution Vulnerability in Microsoft Outlook
CVE-2025-21357

6.7MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Office 2019
Microsoft 365 Apps For Enterprise
Microsoft Office Ltsc 2021
Microsoft Office Ltsc 2024
Vendor
CVE Published:
14 January 2025

What is CVE-2025-21357?

A remote code execution vulnerability exists in Microsoft Outlook, allowing attackers to execute arbitrary code on affected systems by sending specially crafted emails. Users who open malicious emails or preview them in the Outlook client risk compromising their systems. This vulnerability underscores the importance of keeping Microsoft Outlook updated to the latest version. For detailed information and remediation steps, visit the official Microsoft advisory.

Affected Version(s)

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office 2019 32-bit Systems 19.0.0

Microsoft Office LTSC 2021 x64-based Systems 16.0.1

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-21357 : Remote Code Execution Vulnerability in Microsoft Outlook