CVE-2024-38173

—

CVSS 3.1

6.7 medium

EPSS

<1%p50

Published

Aug 13, 2024 (Aug 13, 2024)

Modified

Jun 17, 2026

Description

Microsoft Outlook Remote Code Execution Vulnerability

Vendors: microsoft
Products: 365 apps, office, office long term servicing channel, outlook
Weakness: CWE-73
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news2 stories

Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2024Vulnerability in the wildCVE-2024-38189 CVE-2024-38178 CVE-2024-38193+13 CVEs1

60

Research Uncovers New Microsoft Outlook Vulnerability

Infosecurity MagazineAug 14, 16:00 UTC · Aug 14, 2024Vulnerability CVE-2024-38173 CVE-2024-30103

60