CVE-2024-21413

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Microsoft Outlook Remote Code Execution Vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Feb 13, 2024
Last modified
Aug 10, 2026
Added to CISA KEV
Feb 6, 2025
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-214148.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-214158.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-214169.8Windows TCP/IP Remote Code Execution VulnerabilityCVE-2024-214178.8Windows Text Services Framework Elevation of Privilege VulnerabilityCVE-2024-214187.8Software for Open Networking in the Cloud (SONiC) Elevation of Privilege VulnerabilityCVE-2024-214195.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2024-21425.4The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Info Table widget inCVE-2024-214208.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2024-214217.5Azure SDK Spoofing VulnerabilityCVE-2024-214234.8Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2024-214246.5Azure Compute Gallery Elevation of Privilege VulnerabilityCVE-2024-214258.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-21413: Critical severity, CVSS 9.8 | Vulnix