MS.Outlook.CVE-2024-38021.Remote.Code.Execution

Description

This indicates an attempt to exploit a Remote Code Execution vulnerability in Microsoft Outlook.
The vulnerability is due to the improper handling of specially crafted hyperlinks. A remote, unauthenticated attacker could exploit this vulnerability by sending maliciously crafted emails to the target system. Successful exploitation may lead to arbitrary code execution within the context of the system.

Affected Products

Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38021

References