CyberSec.Space Logo
Back to CVE Browser

CVE-2024-21413

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-02-13
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Microsoft Outlook Remote Code Execution Vulnerability

Affected Platforms (CPE)

📦
Microsoft

365 Apps

All versions
📦
Microsoft

Office 2016

All versions
📦
Microsoft

Office 2019

All versions
📦
Microsoft

Office Long Term Servicing Channel

= 2021

References & Advisories

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413
🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413
🔗 https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/
🔗 https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script
🔗 https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413

Related Security Intelligence Articles

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

2026-07-27

Global Cyber Intel Digest: July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

2026-07-24

Global Cyber Intel Digest: July 23, 2026

Key threat updates including CISA's KEV addition of Langflow CVE-2026-0770 remote code execution, unauthenticated path traversal in Windmill CVE-2026-29059, and ongoing incident response guidance for SonicWall SMA1000 zero-day exposures.

2026-07-23

Related Vulnerabilities

CVE-2026-5863010.0

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-630807.1

Aptabase through commit 5a89368 contains a SQL injection vulnerability in the ClickHouse query backend that allows authenticated a...

CVE-2026-535944.9

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's `Manage -> Logs -> App Logs` featur...

CVE-2026-425667.5

Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.long_name...