CVE-2024-21413CISA KEV
Microsoft Outlook Improper Input Validation Vulnerability
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
CISA catalog record
Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.
- Product
- Office Outlook
- Added to KEV
- 6 Feb 2025
- Federal remediation due
- 27 Feb 2025
- Known ransomware use
- Not reported