PT-2025-21007 · Microsoft · Outlook

Haifei Li · Published 2025-05-13 · Updated 2025-10-14 · CVE-2025-32705

Positive Technologies · (AI Summary)

CVSS v3.1

7.8

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook (affected versions not specified)

Description The issue is an out-of-bounds read in Microsoft Office Outlook, which could allow an unauthorized attacker to execute code locally. The issue can be triggered by oversized files in attachments, such as ICS calendars, leading to memory corruption. As of July 2025, updates are available to address this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-05590

CVE-2025-32705

Affected Products

Outlook

References · 13

• https://bdu.fstec.ru/vul/2025-05590 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-32705 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32705 · Vendor Advisory
• https://twitter.com/CVEnew/status/1922339785592733750 · Twitter Post
• https://twitter.com/fletch_ai/status/1922955161556877721 · Twitter Post
• https://twitter.com/dailytechonx/status/1922751269804048539 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1922480579351556605 · Twitter Post
• https://t.me/cvetracker/23752 · Telegram Post
• https://twitter.com/windowsforum/status/1922525497709187385 · Twitter Post
• https://twitter.com/grok/status/1952076483977253215 · Twitter Post
• https://twitter.com/HaifeiLi/status/1922350867581415802 · Twitter Post
• https://twitter.com/HaifeiLi/status/1978214185566916642 · Twitter Post
• https://twitter.com/windowsforum/status/1922646220163457153 · Twitter Post