Description
Microsoft Outlook Remote Code Execution Vulnerability
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Microsoft 365 Apps for Enterprise
16.0.1 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office 2016
16.0.0 to < 16.0.5435.1001affected
Microsoft Microsoft Office 2019
19.0.0 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office LTSC 2021
16.0.1 to < https://aka.ms/OfficeSecurityReleasesaffected
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413 ↗
- https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script ↗
- https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script ↗
- https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/ ↗