NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2024-38021

CVSS 3.1: 8.8 high
EPSS: 3%p88
Published: Jul 9, 2024 · Jul 9, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-38021 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Outlook Remote Code Execution Vulnerability

Vendors: microsoft

Products: 365 apps, office, office long term servicing channel

Weakness: CWE-20

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news

6 stories

Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2024Exploit / PoCExploitedCVE-2024-43451 CVE-2024-49039 CVE-2024-21410+64

60

Zero-day patched by Microsoft has been exploited by attackers for over a year (CVE-2024-38112)

Help Net SecurityJul 16, 13:38 UTC · Jul 16, 2024Exploit / PoCExploitedCVE-2024-38112 CVE-2024-380212 · 1 read

60

Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited

The Hacker NewsJul 11, 09:02 UTC · Jul 11, 2024VulnerabilityExploitedCVE-2024-38080 CVE-2024-38112 CVE-2024-37985+32 · 1 read

60

Microsoft Outlook Faced Critical Zero

Infosecurity MagazineJul 10, 16:30 UTC · Jul 10, 2024Data breachCVE-2024-38021 CVE-2024-301032

60

Microsoft Patch Tuesday, July 2024 Edition

Krebs on SecurityJul 9, 21:17 UTC · Jul 9, 2024VulnerabilityExploitedCVE-2024-38080 CVE-2024-38112 CVE-2024-38021+54 · 1 read

60

Largest Patch Tuesday in 3 months includes 5 critical vulnerabilities

Cisco TalosJul 9, 18:10 UTC · Jul 9, 2024VulnerabilityExploitedCVE-2024-38023 CVE-2024-38060 CVE-2024-38074+74 · 1 read

60