CVE-2024-38021

—1

CVSS 3.1

8.8 high

EPSS

3%p88

Published

Jul 9, 2024 (Jul 9, 2024)

Modified

Jun 17, 2026

Description

Microsoft Outlook Remote Code Execution Vulnerability

Vendors: microsoft
Products: 365 apps, office, office long term servicing channel
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news6 stories

Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2024Exploit / PoC in the wildCVE-2024-43451 CVE-2024-49039 CVE-2024-21410+6 CVEs

60

Zero-day patched by Microsoft has been exploited by attackers for over a year (CVE-2024-38112)

Help Net SecurityJul 16, 13:38 UTC · Jul 16, 2024Exploit / PoC in the wildCVE-2024-38112 CVE-2024-38021

60

Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited

The Hacker NewsJul 11, 09:02 UTC · Jul 11, 2024Vulnerability in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-37985+3 CVEs

60

Microsoft Outlook Faced Critical Zero

Infosecurity MagazineJul 10, 16:30 UTC · Jul 10, 2024Data breach CVE-2024-38021 CVE-2024-30103

60

Microsoft Patch Tuesday, July 2024 Edition

Krebs on SecurityJul 9, 21:17 UTC · Jul 9, 2024Vulnerability in the wildCVE-2024-38080 CVE-2024-38112 CVE-2024-38021+5 CVEs1

60

Largest Patch Tuesday in 3 months includes 5 critical vulnerabilities

Cisco TalosJul 9, 18:10 UTC · Jul 9, 2024Vulnerability in the wildCVE-2024-38023 CVE-2024-38060 CVE-2024-38074+7 CVEs

60