CVEvulnerability
CVE-2024-21413
CISA Known Exploited Vulnerability
Microsoft Outlook Improper Input Validation Vulnerability — Microsoft Office Outlook
Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.
- Added to KEV
- 2025-02-06
- Remediation due
- 2025-02-27
- Ransomware use
- Unknown
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Notes
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 ; https://nvd.nist.gov/vuln/detail/CVE-2024-21413
- Status
- Analyzed
- Published
- 2024-02-13
- Last modified
- 2026-08-10
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-20
Description
Microsoft Outlook Remote Code Execution Vulnerability
Affected configurations
• microsoft 365 apps
• microsoft office 2016
• microsoft office 2019
• microsoft office long term servicing channel 2021
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 Patch, Vendor Advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 Patch, Vendor Advisory
- https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/ Technical Description
- https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script Exploit
- https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script Mitigation
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413 US Government Resource