Outlook Script Kiddie Exploit

Microsoft Office Outlook is a widely used email client. This vulnerability allows an attacker to execute code locally on your computer by manipulating the Outlook script engine, which can lead to unauthorized access and potential data theft.

You're affected if you use Use after free. Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

1. Update to the latest version of Microsoft Office Outlook: https://www.microsoft.com/en-us/p/outlook/PC/AYGVDDNYRDKP
2. Immediate mitigations:
3. Disable macros in Outlook (Settings > Trust Center > Trust Center Settings > Macro Settings)
4. Restrict script execution in Outlook (Settings > Trust Center > Trust Center Settings > Scripting)

• Vendor Advisory