CVE-2026-70125
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
A heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. The vulnerability requires a local attack vector.
Risk Assessment
It may allow a local attacker to execute code in the user's context, leading to workstation compromise. The risk affects systems with Outlook installed.
Recommendation
Update Microsoft Office Outlook to a fixed version. Restrict users' ability to run unknown files.
Other vulnerabilities in Microsoft Office Outlook
See all- CVE-2026-97749Critical
Microsoft Office Outlook is affected by a double free vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-97016Critical
Microsoft Office Outlook is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-88156Critical
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70291Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70242Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-78509Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-108448High
A heap-based buffer overflow in Microsoft Office Outlook allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.
- CVE-2026-97012High
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70282High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70281High
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS