Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

Outlook Password Recovery 2.10 Crashes from Oversized Text Entry

CVE-2019-25476
Summary

The Outlook Password Recovery software has a bug that lets a malicious text file crash the program if it's too big. This can happen if an attacker creates a large text file and pastes it into a field in the app. To stay safe, update the software to the latest version.

Original title
Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can create a malicious text...
Original description
Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can create a malicious text file containing 6000 bytes of data and paste it into the User Name and Registration Code field to trigger a denial of service condition.
nvd CVSS3.1 6.2
nvd CVSS4.0 6.9
Vulnerability type
CWE-787 Out-of-bounds Write
Published: 11 Mar 2026 · Updated: 13 Mar 2026 · First seen: 11 Mar 2026