# CVE-2024-21413

Microsoft Outlook Remote Code Execution Vulnerability

- Page: https://www.vulneraibility.com/cve/CVE-2024-21413
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2025-02-06; CISA due date 2025-02-27
- EPSS: 94.66%
- Unvetted proof-of-concept code on GitHub: 42 GitHub proofs of concept (first 2024-02-15)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2025-02-07)
- Weakness: CWE-20
- Published: 2024-02-13

## Affected versions

- Microsoft Microsoft 365 Apps for Enterprise: affected >= 16.0.1 and < https://aka.ms/OfficeSecurityReleases
- Microsoft Microsoft Office 2016: affected >= 16.0.0 and < 16.0.5435.1001
- Microsoft Microsoft Office 2019: affected >= 19.0.0 and < https://aka.ms/OfficeSecurityReleases
- Microsoft Microsoft Office LTSC 2021: affected >= 16.0.1 and < https://aka.ms/OfficeSecurityReleases

A version outside these ranges is not a statement that it is unaffected.

## References

- [patch] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413
- [other] https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script
- [other] https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script
- [other] https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.