Feb 2025: Microsoft Outlook Spoofing Vulnerability
CVE-2025-21259 Published on February 11, 2025

Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
YES
Technical Impact:
PARTIAL

Weakness Type

User Interface (UI) Misrepresentation of Critical Information

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.


Products Associated with CVE-2025-21259

stack.watch emails you whenever new vulnerabilities are published in Microsoft Outlook or Microsoft Outlook 2016. Just hit a watch button to start following.

Affected Versions

Microsoft Outlook for Android:

Exploit Probability

EPSS
1.15%
Percentile
67.42%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.