CVE-2024-38173

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Aug 13, 2024
Updated: Aug 16, 2024
CWE ID 73

Summary

CVE-2024-38173 is a newly disclosed remote code execution vulnerability affecting Microsoft Outlook. Successful exploitation allows attackers to execute malicious code on a victim's system through specially crafted emails. This issue poses a significant threat, as email is a common vector for cyberattacks and Outlook is widely used. Users are strongly advised to install patches released by Microsoft as soon as possible to mitigate this risk. Failure to do so could result in unauthorized system access, data theft, or other malicious activities.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Office
  • Microsoft Office Outlook
  • Microsoft 365 Apps
  • Microsoft Office 365

Affected Vendors

  • Microsoft