CVE entry · CVE-2024-21413
CVE-2024-21413: Microsoft Outlook Improper Input Validation Vulnerability
Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.
- Actively exploited: added to CISA’s KEV catalog on February 6, 2025.
- Use by ransomware: not established so far.
- Remediation deadline for US federal agencies: February 27, 2025.
- CERT-FR alert CERTFR-2024-ALE-005 of February 15, 2024.
Description from CISA’s KEV catalog.
CERT-FR alerts and notices
-
CERTFR-2024-ALE-005[MàJ] Vulnérabilité dans Microsoft Outlook (15 février 2024)
What to do
- Check whether your estate includes Microsoft Office Outlook, including internet-facing devices.
- Apply the vendor’s patch or mitigations (references below). Failing that, isolate the product or stop using it, as CISA requires of US federal agencies.
- An exploited vulnerability has often been used before it was fixed: look for signs of compromise, especially on internet-facing devices.
References
- Vendor advisory or reference cited by CISA (msrc.microsoft.com)
- NVD entry (NIST)
- CISA KEV catalog
Other Microsoft vulnerabilities
-
Microsoft Windows Command Injection Vulnerability
-
Microsoft SharePoint Code Injection Vulnerability
-
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
-
Microsoft Windows Link Following Vulnerability
-
Microsoft SQL Server Remote Code Execution Vulnerability
-
Microsoft SharePoint Weak Authentication Vulnerability