CVE-2024-21413 is a critical Microsoft Outlook Remote Code Execution Vulnerability with a severity rating of 9.8. This vulnerability allows attackers to potentially execute arbitrary code on a victim's system remotely. It affects various Microsoft Corporation products, including Microsoft 365 Apps, Microsoft Office 2016, Microsoft Office 2019, and Microsoft Office Long Term Servicing Channel 2021. Users of these systems should be aware of this vulnerability and take necessary precautions to protect their devices.

How do I know if I'm affected?

If you're using Microsoft Outlook, you might be affected by the CVE-2024-21413 vulnerability. Signs that you could be affected include the Preview Pane being an attack vector, successful exploitation allowing an attacker to bypass Office Protected View, and gaining high privileges like read, write, and delete functionality. Additionally, an attacker could craft a malicious link that bypasses the Protected View Protocol, leading to the leaking of local NTLM credential information and remote code execution.

What should I do if I'm affected?

If you're affected by the CVE-2024-21413 vulnerability, it's crucial to update your Microsoft Outlook software immediately. For Office 2016 users, install all updates listed for your edition. For Microsoft Office LTSC 2021, Microsoft 365 Apps for Enterprise, and Microsoft Office 2019 users, follow the provided links to get the security updates. Always ensure you're running the latest software version for optimal security.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2024-21413 vulnerability, also known as the Microsoft Outlook Remote Code Execution Vulnerability, is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was added to the National Vulnerability Database on February 13, 2024. There is no specific due date or required action mentioned, but users are advised to apply security updates provided by Microsoft to mitigate the risk.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-20 involves improper input validation, which can lead to remote code execution and bypassing Office Protected View. It affects Microsoft Outlook and potentially other software using insecure APIs.

For more details

CVE-2024-21413 is a critical vulnerability affecting Microsoft Outlook, with potential consequences such as remote code execution and bypassing Office Protected View. To learn more about this vulnerability, its severity, technical details, and affected software configurations, refer to the NVD or the resources listed below.

• Microsoft Security Update Guide

• Check Point Research Blog Post