{"history":[{"alert":0,"cve":"CVE-2024-21413","id":22586,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.9466, \"percentile\": 0.99858}"},{"alert":0,"cve":"CVE-2024-21413","id":20206,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.9466, \"percentile\": 0.99857}"},{"alert":0,"cve":"CVE-2024-21413","id":18175,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.9466, \"percentile\": 0.99857}"},{"alert":0,"cve":"CVE-2024-21413","id":16239,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.9466, \"percentile\": 0.99857}"},{"alert":0,"cve":"CVE-2024-21413","id":14217,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.9466, \"percentile\": 0.99857}"},{"alert":0,"cve":"CVE-2024-21413","id":11999,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.9466, \"percentile\": 0.99857}"},{"alert":0,"cve":"CVE-2024-21413","id":9985,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.9466, \"percentile\": 0.99857}"},{"alert":0,"cve":"CVE-2024-21413","id":7533,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.9466, \"percentile\": 0.99856}"},{"alert":1,"cve":"CVE-2024-21413","id":6147,"kind":"cna","observed_at":1793787601,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2024-21413\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-07T04:55:29.467185Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2025-02-06\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:05:24.765Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-02-06T00:00:00.000Z\", \"value\": \"CVE-2024-21413 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}, {\"providerMetadata\": {\"dateUpdated\": \"2025-05-29T14:06:52.678Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"url\": \"https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script\"}, {\"url\": \"https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script\"}, {\"name\": \"Microsoft Outlook Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"x_transferred\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/\"}], \"title\": \"CVE Program Container\", \"x_generator\": {\"engine\": \"ADPogram 0.0.1\"}}], \"cna\": {\"affected\": [{\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Microsoft 365 Apps for Enterprise\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"https://aka.ms/OfficeSecurityReleases\", \"status\": \"affected\", \"version\": \"16.0.1\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Microsoft Office 2016\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"16.0.5435.1001\", \"status\": \"affected\", \"version\": \"16.0.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Microsoft Office 2019\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"https://aka.ms/OfficeSecurityReleases\", \"status\": \"affected\", \"version\": \"19.0.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Microsoft Office LTSC 2021\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"https://aka.ms/OfficeSecurityReleases\", \"status\": \"affected\", \"version\": \"16.0.1\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"https://aka.ms/OfficeSecurityReleases\", \"versionStartIncluding\": \"19.0.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*\", \"versionEndExcluding\": \"https://aka.ms/OfficeSecurityReleases\", \"versionStartIncluding\": \"16.0.1\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"https://aka.ms/OfficeSecurityReleases\", \"versionStartIncluding\": \"16.0.1\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:office:*:*:*:*:*:*:x86:*\", \"versionEndExcluding\": \"16.0.5435.1001\", \"versionStartIncluding\": \"16.0.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2024-02-13T08:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Microsoft Outlook Remote Code Execution Vulnerability\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-20\", \"description\": \"CWE-20: Improper Input Validation\", \"lang\": \"en-US\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-08-10T17:52:40.126Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"Microsoft Outlook Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413\"}], \"title\": \"Microsoft Outlook Remote Code Execution Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2024-21413\", \"datePublished\": \"2024-02-13T18:02:24.799Z\", \"dateReserved\": \"2023-12-08T22:45:21.300Z\", \"dateUpdated\": \"2026-08-10T17:52:40.126Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2024-21413","id":5310,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.9466, \"percentile\": 0.99857}"},{"alert":0,"cve":"CVE-2024-21413","id":3092,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.9466, \"percentile\": 0.99857}"},{"alert":1,"cve":"CVE-2024-21413","id":506,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2024-21413\", \"cwes\": [\"CWE-20\"], \"dateAdded\": \"2025-02-06\", \"dueDate\": \"2025-02-27\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 ; https://nvd.nist.gov/vuln/detail/CVE-2024-21413\", \"product\": \"Office Outlook\", \"requiredAction\": \"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.\", \"vendorProject\": \"Microsoft\", \"vulnerabilityName\": \"Microsoft Outlook Improper Input Validation Vulnerability\"}"}],"record":{"affected":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft 365 Apps for Enterprise","vendor":"Microsoft","versions":[{"lessThan":"https://aka.ms/OfficeSecurityReleases","status":"affected","version":"16.0.1","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office 2016","vendor":"Microsoft","versions":[{"lessThan":"16.0.5435.1001","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office 2019","vendor":"Microsoft","versions":[{"lessThan":"https://aka.ms/OfficeSecurityReleases","status":"affected","version":"19.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office LTSC 2021","vendor":"Microsoft","versions":[{"lessThan":"https://aka.ms/OfficeSecurityReleases","status":"affected","version":"16.0.1","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2024-21413","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-07T04:55:29.467185Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2025-02-06","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T23:05:24.765Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413"}],"timeline":[{"lang":"en","time":"2025-02-06T00:00:00.000Z","value":"CVE-2024-21413 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2025-05-29T14:06:52.678Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"url":"https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script"},{"url":"https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script"},{"name":"Microsoft Outlook Remote Code Execution Vulnerability","tags":["vendor-advisory","x_transferred"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413"},{"tags":["x_transferred"],"url":"https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/"}],"title":"CVE Program Container","x_generator":{"engine":"ADPogram 0.0.1"}}],"cna":{"affected":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft 365 Apps for Enterprise","vendor":"Microsoft","versions":[{"lessThan":"https://aka.ms/OfficeSecurityReleases","status":"affected","version":"16.0.1","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office 2016","vendor":"Microsoft","versions":[{"lessThan":"16.0.5435.1001","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office 2019","vendor":"Microsoft","versions":[{"lessThan":"https://aka.ms/OfficeSecurityReleases","status":"affected","version":"19.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Microsoft Office LTSC 2021","vendor":"Microsoft","versions":[{"lessThan":"https://aka.ms/OfficeSecurityReleases","status":"affected","version":"16.0.1","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases","versionStartIncluding":"19.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases","versionStartIncluding":"16.0.1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:*","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases","versionStartIncluding":"16.0.1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:*:*:*:*:*:*:x86:*","versionEndExcluding":"16.0.5435.1001","versionStartIncluding":"16.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2024-02-13T08:00:00.000Z","descriptions":[{"lang":"en-US","value":"Microsoft Outlook Remote Code Execution Vulnerability"}],"metrics":[{"cvssV3_1":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20: Improper Input Validation","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-08-10T17:52:40.126Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"Microsoft Outlook Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413"}],"title":"Microsoft Outlook Remote Code Execution Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2024-21413","datePublished":"2024-02-13T18:02:24.799Z","dateReserved":"2023-12-08T22:45:21.300Z","dateUpdated":"2026-08-10T17:52:40.126Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794241201,"cve":"CVE-2024-21413","description":"Microsoft Outlook Remote Code Execution Vulnerability","epss":{"date":"2026-11-12","epss":0.9466,"percentile":0.99858},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2024-21413","cwes":["CWE-20"],"dateAdded":"2025-02-06","dueDate":"2025-02-27","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 ; https://nvd.nist.gov/vuln/detail/CVE-2024-21413","product":"Office Outlook","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","shortDescription":"Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.","vendorProject":"Microsoft","vulnerabilityName":"Microsoft Outlook Improper Input Validation Vulnerability"},"kev_checked":1794522003,"products":"Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 2016, Microsoft Microsoft Office 2019, Microsoft Microsoft Office LTSC 2021","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413","https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script","https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script","https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/"],"score":{"baseScore":9.8,"baseSeverity":"CRITICAL","provider":"microsoft","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Microsoft Outlook Remote Code Execution Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}