PT-2025-50186 · Microsoft · Outlook +2

Published

2025-12-09

·

Updated

2026-01-23

·

CVE-2025-62562

CVSS v3.1
7.8
VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook (affected versions not specified)
Description A use-after-free issue exists in Microsoft Office Outlook that could allow an unauthorized attacker to execute code locally. The issue allows remote attackers to execute arbitrary code and affect the system. The vulnerability can be triggered by replying to a crafted email.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use After Free

Weakness Enumeration

Related Identifiers

BDU:2025-15533
CVE-2025-62562

Affected Products

Outlook
Office Word
Sharepoint Server