CVE-2024-21413
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
10/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — Office Outlook
Date Added
2025-02-06
Remediation Due
2025-02-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 ; https://nvd.nist.gov/vuln/detail/CVE-2024-21413
Weakness Classification (1)
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| microsoft | 365_apps | - |
| microsoft | office_2016 | - |
| microsoft | office_2016 | - |
| microsoft | office_2019 | - |
| microsoft | office_2019 | - |
| microsoft | office_long_term_servicing_channel | 2021 |
References & Advisories (5)
US Government Resource
Technical Description
Patch
Vendor Advisory
Mitigation
Exploit