Microsoft Outlook Remote Code Execution
Vulnerability details
CVECVE-2024-21413
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2026-08-03
VendorMicrosoft
Affected softwareMicrosoft Office
ExposureMedium
Affected devices8
Exploit statusActiveExploit
Recommendation & plan
Apply February 2024 Office security update; enable FQDN link protections.
Remediation plan
1. Identify affected devices. 2. Validate device status. 3. Deploy Microsoft Office via patch management. 4. Verify patch installation. 5. Re-scan for CVE-2024-21413. 6. Confirm exposure reduction.
Due2026-09-17
Affected devices 8
| Device | Risk | Installed | Fixed | Status |
|---|---|---|---|---|
| corp-dc01 | Medium | older | patched | Open |
| corp-srv-app02 | High | older | patched | Open |
| corp-srv-file01 | Medium | older | patched | Open |
| corp-wks-1187 | High | older | patched | Open |
| corp-wks-0421 | Medium | older | patched | Open |
| corp-wks-0913 | Low | older | patched | Open |
| corp-lap-2210 | Medium | older | patched | Open |
| corp-lap-3345 | Low | older | patched | Open |
Remediation workflow
CVE โ Affected Software โ Affected Devices โ Risk โ Exploitability โ Security Recommendation โ Remediation Plan โ Approval โ Remediation โ Verification
Remediation requests require approval. After remediation, verification checks: vulnerability resolved, device healthy, exposure reduced.
