CVE-2024-38021

EPSS 16.12%
Veröffentlicht 09.07.2024 17:15:28
Zuletzt bearbeitet 21.11.2024 09:24:43
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Microsoft Outlook Remote Code Execution Vulnerability

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ 365 Apps Version- SwEditionenterprise

Microsoft ≫ Office Version2016

Microsoft ≫ Office Version2019

Microsoft ≫ Office Long Term Servicing Channel Version2021

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	16.12%	0.945

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
secure@microsoft.com	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38021

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-38021

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-38021

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-38021

EUVD