CVE-2024-21413
Severity CVSS v4.0:
Pending analysis
Type:
CWE-20
Input Validation
Publication date:
13/02/2024
Last modified:
28/10/2025
Description
Microsoft Outlook Remote Code Execution Vulnerability
Impact
Base Score 3.x
9.80
Severity 3.x
CRITICAL
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:* | ||
| cpe:2.3:a:microsoft:office_2016:-:*:*:*:-:*:x64:* | ||
| cpe:2.3:a:microsoft:office_2016:-:*:*:*:-:*:x86:* | ||
| cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x64:* | ||
| cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x86:* | ||
| cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413
- https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/
- https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script
- https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413