{"schemaVersion":3,"id":"CVE-2024-21413","aliases":[],"status":"published","duplicateOf":null,"title":"Microsoft Outlook Improper Input Validation Vulnerability","description":"Microsoft Outlook Remote Code Execution Vulnerability","dates":{"published":"2024-02-13T18:02:24.799Z","modified":"2026-08-10T17:52:40.126Z","reserved":null,"kevAdded":["2025-02-06T00:00:00.000Z"],"kevDue":["2025-02-27T00:00:00.000Z"]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.9466,"percentile":0.99858,"severity":"critical","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.9466},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.9466,"percentile":0.99858}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.9466,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.9466,"percentile":0.99858}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2025-02-06T00:00:00.000Z","dueDate":"2025-02-27T00:00:00.000Z","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","name":"Microsoft Outlook Improper Input Validation Vulnerability","description":"Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.","notes":[{"type":"url","href":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2024-21413","label":"nvd.nist.gov/vuln/detail/CVE-2024-21413"}],"vendor":"Microsoft","product":"Office Outlook","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2025-02-06T00:00:00.000Z","dueDate":"2025-02-27T00:00:00.000Z","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","name":"Microsoft Outlook Improper Input Validation Vulnerability","description":"Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.","notes":[{"type":"url","href":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2024-21413","label":"nvd.nist.gov/vuln/detail/CVE-2024-21413"}],"vendor":"Microsoft","product":"Office Outlook","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_97929DC5092EF8E5","name":"Exploit Reference (vicarius.io)","source":"reference","url":"https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"microsoft","product":"365_apps","name":"365 apps","label":"365_apps","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/365_apps"},{"vendor":"microsoft","product":"microsoft 365 apps for enterprise","name":"Microsoft 365 Apps for Enterprise","label":"microsoft 365 apps for enterprise","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_365_apps_for_enterprise"},{"vendor":"microsoft","product":"microsoft office 2016","name":"Microsoft Office 2016","label":"microsoft office 2016","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.0, < 16.0.5435.1001","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.0, < 16.0.5435.1001","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_2016"},{"vendor":"microsoft","product":"microsoft office 2019","name":"Microsoft Office 2019","label":"microsoft office 2019","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_2019"},{"vendor":"microsoft","product":"microsoft office ltsc 2021","name":"Microsoft Office LTSC 2021","label":"microsoft office ltsc 2021","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_ltsc_2021"},{"vendor":"microsoft","product":"office_2016","name":"office 2016","label":"office_2016","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/office_2016"},{"vendor":"microsoft","product":"office_2019","name":"office 2019","label":"office_2019","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/office_2019"},{"vendor":"microsoft","product":"office_long_term_servicing_channel","name":"office long term servicing channel","label":"office_long_term_servicing_channel","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2021","noFixRecorded":false,"fixedIn":null}],"versionsText":"2021","eol":null,"hubHref":"/vendor/microsoft/office_long_term_servicing_channel"}],"affectedCount":8,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413","hostname":"msrc.microsoft.com","tags":["Vendor Advisory","Patch"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script","label":"www.vicarius.io/vsociety/…","hostname":"www.vicarius.io","tags":["Mitigation"]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script","label":"www.vicarius.io/vsociety/…","hostname":"www.vicarius.io","tags":["Exploit"]},{"url":"https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/","label":"research.checkpoint.com/2024/…","hostname":"research.checkpoint.com","tags":["X Transferred","Technical Description"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-02-13T18:02:24.799Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2025-02-06T00:00:00.000Z","label":"Added to CISA KEV","detail":"Microsoft Outlook Improper Input Validation Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2025-02-27T00:00:00.000Z","label":"CISA remediation due","detail":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","source":"cisa"},{"kind":"modified","date":"2026-08-10T17:52:40.126Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T22:43:27.221Z","stale":false,"partial":false}}