CVE Vulnerabilities

CVE-2025-21361

Improper Restriction of Names for Files and Other Resources

Published: Jan 14, 2025 | Modified: Jan 17, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Microsoft Outlook Remote Code Execution Vulnerability

Weakness

The product constructs the name of a file or other resource using input from an upstream component, but it does not restrict or incorrectly restricts the resulting name.

Affected Software

Name Vendor Start Version End Version
Office Microsoft 2021 (including) 2021 (including)
Office Microsoft 2024 (including) 2024 (including)
Outlook Microsoft * 16.93 (excluding)

Potential Mitigations

References