CVE-2026-70125
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Microsoft Office Outlook contains a remote code execution vulnerability. Technical details were not provided in the description.
Risk Assessment
The vulnerability may allow an attacker to execute code remotely in the context of a user opening a malicious message or file, potentially leading to workstation compromise. This poses a serious threat to the confidentiality, integrity, and availability of organizational data.
Recommendation
Immediately apply available Microsoft security updates for Outlook. Additionally, enforce policies restricting the opening of unknown attachments and links, and educate users about phishing.
Other vulnerabilities in Microsoft Office Outlook
See all- CVE-2026-100208High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78509Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-80084Medium
Out-of-bounds read in Microsoft Office Outlook. An unauthorized attacker can disclose information over a network.
- CVE-2026-80073Medium
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
- CVE-2026-78525High
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78520Medium
An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78519High
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-69629High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70329High
An integer overflow vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-62882Medium
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Microsoft Office Outlook Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS