CVE-2025-21357: Microsoft Outlook Remote Code Execution Vulnerability

According to the CVSS metric, the attack complexity is high (AC:H) and privileges required are low (PR:L). What does that mean for this vulnerability?

An attacker must gain access to the victim user’s Microsoft Outlook account by compromising or stealing their login credential and then install a malicious form prior to exploiting the vulnerability successfully.