CVE DatabaseCVE-2024-21413

Updated 2026-08-10한국어 권고문 →

CVE-2024-214139.8/CRITICALCISA KEVCWE-20

CVE-2024-21413 Technical Vulnerability Analysis & Patch Advisory (CVSS 9.8)

⚡ Jump to Patch

Affected Vendors

security-advisory

Affected Components

enterprise-software

Published Date

2024-02-13

CVSS v3.1

9.8

CRITICAL

EPSS (30d)

94.7%

FIRST.org

CISA KEV

Exploited

NVD Source ↗

Executive & SecOps Summary

SECOPS ASSESSMENT

Affected Scope

Systems running unpatched versions impacted by CVE-2024-21413

Impact

Microsoft Outlook Remote Code Execution Vulnerability...

Mitigation

Apply vendor security patches and restrict external network exposure.

Affected Products & Version Scope

All unpatched versions listed in the official NVD CPE configurations

Remediation & Live Workaround Commands

PATCH & WORKAROUND

Remediation Steps

Upgrade to the latest patched release from the vendor.
Apply virtual patching or network segmentation until maintenance windows allow full patching.

Interactive SecOps Remediation Checklist

0/4 (0%)

Recommended Security Control & Mitigation Partner

Cloudflare Enterprise & Pro WAF

Reduce your attack surface immediately with automated vulnerability scanning and runtime protection.

Block Exploits Instantly with Managed Virtual Patching Rules

Can't patch production immediately? Deploy managed WAF rules at the edge to intercept RCE, SQLi, and deserialization payloads before they hit your origin server.

3-min setup · Automated Zero-Day Managed Rules

Deploy Instant WAF Protection Free

Practice Exploiting & Patching This Web Vulnerability in an Interactive Lab

Launch Hands-On Security Lab

Technical Root Cause & Exploitation Mechanics

Technical Overview

Microsoft Outlook Remote Code Execution Vulnerability

CVSS Score: 9.8 (CRITICAL)
CWE IDs: CWE-20

Official Vendor Advisories & References

NVD Original English Description

Microsoft Outlook Remote Code Execution Vulnerability

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413

Source: secure@microsoft.com · Patch, Vendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413

Source: af854a3a-2127-422b-91ae-364da2661108 · Patch, Vendor Advisory

https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/

Source: af854a3a-2127-422b-91ae-364da2661108 · Technical Description

https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script

Source: af854a3a-2127-422b-91ae-364da2661108 · Exploit

https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script

Source: af854a3a-2127-422b-91ae-364da2661108 · Mitigation

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 · US Government Resource

Frequently Asked SecOps Questions (CVE-2024-21413)

FAQ

Q1. How critical is CVE-2024-21413 and is it actively exploited in the wild?

CVE-2024-21413 is rated CVSS 9.8 (CRITICAL) with a 30-day EPSS exploitation probability of 94.7%. It is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, requiring immediate emergency remediation.

Q2. Which vendors and products are affected by CVE-2024-21413?

Primary impacted vendors include security-advisory across enterprise-software. Scope summary: All unpatched versions listed in the official NVD CPE configurations

Q3. What temporary mitigations or workarounds exist for CVE-2024-21413 before patching?

[Mitigation] Apply vendor security patches and restrict external network exposure. Follow the CLI remediation commands and interactive SecOps checklist on this page to restrict exposure prior to your maintenance window.

SECOPS WORKBENCH INTEGRATION