CVE-2025-21259: Microsoft Outlook

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Microsoft Outlook Spoofing Vulnerability

Affected products

• Microsoft Outlook: before 4.2501.1 (fixed in 4.2501.1)

Published 2025-02-11. Last modified 2026-06-17.