A vulnerability in Microsoft Outlook allowed threat actors to distribute malware via email The bug abuses the Windows Object Linking and Embedding function A patch is already available, and users are ...
In a security advisory, Microsoft detailed CVE-2025-21298, a use-after-free vulnerability with a severity score of 9.8/10 (critical ... by sending the specially crafted email to the victim ...
In a security alert, Microsft warned users how easy it is for hackers to distribute malware using their Outlook email client. Microsoft has already released a patch for the CVE-2025-21298 user ...
but the actual vector is via email and not a service listening on the network. “The Microsoft Outlook preview pane is a valid attack vector,” Tyler Reguly, associate director of security ...
If you’re using an email client rather than a cloud-based email service, there’s a very good chance that it’s Microsoft Outlook ... information before sending them off.
Microsoft has released a patch it claims fixes the DAC problem. The bad news – for some users – is that the new Outlook for Windows app has reached Windows 10. The preview update rolled out over ...