Microsoft Outlook Vulnerability Let Attackers Execute Malicious Code Remotely

Cybersecuritynews •Abinaya • December 10, 2025

Microsoft has patched a critical remote code execution (RCE)vulnerability in Outlook that could allow attackers to execute malicious code on vulnerable systems. The flaw, tracked as CVE-2025-62562, was released on December 9, 2025, and requires immediate attention from IT administrators and end users. The vulnerability stems from a use-after-free weakness in Microsoft Office Outlook. According […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Outlook Vulnerability Allows Remote Code Execution Microsoft has patched a critical remote code execution vulnerability in Outlook, tracked as CVE-2025-62562, which could enable attackers to execute malicious code on affected systems. The flaw arises from a use-after-free weakness in Microsoft Office Outlook and requires immediate attention from IT administrators and end users. The vulnerability was disclosed on December 9, 2025. 2 sources 37

Extracted Entities

CVEs (1)

CVE-2025-62562

Platforms (1)

Microsoft Office Outlook