Out-of-Bounds Read Vulnerability in Microsoft Office Outlook
CVE-2025-32705

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft 365 Apps For Enterprise
Microsoft Office Ltsc 2021
Microsoft Office Ltsc 2024
Vendor
CVE Published:
13 May 2025

Badges

👾 Exploit Exists📰 News Worthy

What is CVE-2025-32705?

An out-of-bounds read vulnerability in Microsoft Office Outlook can enable unauthorized attackers to execute code on a victim's system. By exploiting this flaw, an attacker may gain unauthorized access, potentially leading to data breaches or the deployment of malicious code. Users are advised to implement the latest updates from Microsoft to mitigate risks and secure their systems against potential exploits.

Affected Version(s)

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office LTSC 2021 x64-based Systems 16.0.1

Microsoft Office LTSC 2024 32-bit Systems 1.0.0

News Articles

favicon imageCybersecurityNews

Outlook RCE Vulnerability Allows Attackers to Execute Arbitrary Code

Microsoft addressed a significant security flaw in its Outlook email client during the May 2025 Patch Tuesday, releasing fixes for 72 vulnerabilities.

1 week ago

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by CybersecurityNews

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-32705 : Out-of-Bounds Read Vulnerability in Microsoft Office Outlook