Update now! Microsoft fixes two zero-days on February Patch Tuesday

Microsoft has issued patches for 73 security vulnerabilities in its February 2024 Patch Tuesday. Among these vulnerabilities are two zero-days that are reportedly being used in the wild. The two zero-day vulnerabilities have already been added to the Cybersecurity & Infrastructure Security Agency...

Microsoft Outlook 2016 Remote Code Execution Vulnerability (KB5002543)

This host is missing an important security update according to Microsoft KB5002543 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security Updates for Outlook C2R (February 2024)

The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. CVE-2024-21378 - An elevation of privilege vulnerability. CVE-2024-21402 Note that Nessus has not tested fo...

CVE-2024-21413

Microsoft Outlook Remote Code Execution Vulnerability...

CVE-2024-21413

Microsoft Outlook Remote Code Execution Vulnerability...

Remote code execution

Microsoft Outlook Remote Code Execution Vulnerability...

CVE-2024-21402

Microsoft Outlook Elevation of Privilege Vulnerability...

CVE-2024-21402

Microsoft Outlook Elevation of Privilege Vulnerability...

CVE-2024-21378

Microsoft Outlook Remote Code Execution Vulnerability...

CVE-2024-21378

Microsoft Outlook Remote Code Execution Vulnerability...

Remote code execution

Microsoft Outlook Remote Code Execution Vulnerability...

Privilege escalation

Microsoft Outlook Elevation of Privilege Vulnerability...

CVE-2024-21378 Microsoft Outlook Remote Code Execution Vulnerability

...

CVE-2024-21378

The connected document describes a GitHub exploit example for CVE-2024-21378 targeting Microsoft Outlook via Exchange Online. It claims to execute arbitrary code by delivering a malicious COM DLL embedded in a form attachment, loaded into the Outlook process after user interaction in the thick cl...

CVE-2024-21378 Microsoft Outlook Remote Code Execution Vulnerability

...

CVE-2024-21413

Summary of CVE-2024-21413 (Microsoft Outlook / Moniker Link): A vulnerability in Outlook where crafted Moniker Link URLs (often via file:///UNC paths) can trigger an automatic SMB access, potentially leaking the user’s NTLM hash to an attacker. Multiple PoCs on GitHub demonstrate delivering malic...

CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability

...

CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability

...

CVE-2024-21402 Microsoft Outlook Elevation of Privilege Vulnerability

...

CVE-2024-21402

CVE-2024-21402 is a Microsoft Outlook Elevation of Privilege vulnerability. The CVE affects Outlook as part of Microsoft Office/365 suites and is triggered locally, enabling a low-privileged user to escalate to higher privileges on the affected system. The base CVSSv3.1 score is 7.1 (HIGH) with P...