[ CVE-2024-21413 · Published 13 Feb 2024 ]
Microsoft Outlook Improper Input Validation Vulnerability
Exploited · CISA KEV CVSS 9.8
EPSS 95%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2025-02-06
- EPSS: 95% chance of exploitation in the next 30 days (higher than 100% of CVEs)
- Critical severity: CVSS 9.8
[ Description ]Official description
Microsoft Outlook Remote Code Execution Vulnerability
CISA: Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 27 Feb 2025): Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Patch on msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413PatchVendor Advisory
- research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-…Technical Description
- www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affect…Exploit
- www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affect…Mitigation
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource