Microsoft Outlook Vulnerability Let Attackers Execute Malicious Code Remotely

Microsoft released patches for a use-after-free vulnerability in Outlook (CVE-2025-62562, CVSS 7.8) that can lead to code execution if a user replies to a crafted email; updates are available for most Windows Office and SharePoint products (Word 2016, Office LTSC, Office 2019, Microsoft 365 Apps) while LTSC for Mac 2021/2024 updates are not yet available, and Microsoft reports no evidence of active exploitation.