Microsoft Outlook: Vulnerability Allows Code Execution
A BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Bürger Cert) ·
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key insight
The alert contains no CVE, CVSS, or exploit details and can therefore only be operationalized via the concrete Outlook patch level.
Description
The BSI alert describes a vulnerability in Microsoft Outlook that allows arbitrary program code execution. Exploitation requires a user to open a manipulated Office file, for example one delivered by email. Neither a CVE ID nor CVSS values, patch information, or indications of active exploitation are provided. Without these details, the severity of the vulnerability cannot be conclusively assessed, and exposure depends on the specific Outlook build and patch level.
Risk score
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 0.00
- industry weight
- 1.21
- freshness factor
- 0.50
- exploitability factor
- 1.00
- days old
- 47.00
- vendor mismatch penalty
- 0.00
Path: operational