medium6.7Public exploit code
CVE-2025-47171
Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Outlook - Remote Code Execution (RCE)2025-07-08 · remote · windows
Impact
Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | Office | Version 2019 |
| Microsoft | Office Long Term Servicing Channel | Versions 2021, 2024 |
| Microsoft | Outlook | Version 2016 |