Critical Microsoft Outlook Remote Code Execution Vulnerability

A critical security flaw has been discovered in Microsoft Office 2016, 2019, 2021 and 365. This vulnerability can be exploited by attackers to achieve two main goals:

• Execute malicious code on your device by bypassing security measures in Protected Mode.
• Steal your login credentials, specifically your NTLM password hash.

Solutions and mitigations

• Install security updates as soon as possible.
• Do not open attachments or click on links in emails from unknown senders.
• Be wary of suspicious emails, even if they seem from someone you know.
• Verify the legitimacy of emails before interacting with any links or attachments.

Vulnerability Details

CVE-ID: CVE-2024-21413

CVSS3.0 Score: 9.8 (Critical Severity)