Microsoft Outlook Improper Input Validation Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 13, 2024 · Catalog

   Detected

   Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.

2. Feb 6, 2025 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

3. Feb 27, 2025 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

4. Aug 10, 2026 · Catalog

   Updated

   Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.

Affected

• cpe microsoft/365 appsversion unspecified
• cpe microsoft/office 2016version unspecified
• cpe microsoft/office 2019version unspecified
• cpe microsoft/office long term servicing channel2021
• vendor Microsoft Office Outlookversion unspecified

Sources

• CERT-FRGovernment advisoryCVE-2024-21413

  \[Mise à jour du 15 mars 2024\] Ajout de précision concernant les défi-réponses NTLM \[Mise à jour du 22 février 2024\] Ajout de recommandations et de précisions sur le fonctionnement de la vulnérabilité. La vulnérabilité CVE-2024-21413 permet à un attaquant de contourner les mes

  cert.ssi.gouv.fr
• CISA KEVConfirmed exploitationCVE-2024-21413

  Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.

  cisa.gov
• CVE.orgVulnerability recordCVE-2024-21413

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2024-21413

  30-day exploitation probability 94.7%

  first.org
• NIST NVDVulnerability recordCVE-2024-21413

  Microsoft Outlook Remote Code Execution Vulnerability

  nvd.nist.gov

References

• CISA note · msrc.microsoft.com
• CISA note · nvd.nist.gov
• Technical Description · research.checkpoint.com
• US Government Resource · cisa.gov
• Exploit · vicarius.io
• Mitigation · vicarius.io