CVSS 8.8 High EXPLOITED Patched 2024

CVE-2024-30103

Microsoft Outlook RCE vulnerability. Triggered without requiring user interaction, it has been used to spread AgentTesla and other email-based infostealers.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 8.8 / 10.0

Severity High

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Microsoft Outlook 2016/2019/2021, M365

Exploitation Method Remote Code Execution

MITRE ATT&CK T1566.001 - Spearphishing Attachment

CVE-2024-30103 Analizi

Microsoft Outlook kritik RCE acigi. Kotu amacli e-posta ozel olarak hazirlanmis bu acigi kullanarak kullanicinin dosyayi acmasina gerek kalmaksizin kod calistiriyor. AgentTesla ve GuLoader dagger bu acigi e-posta tabanlı dagitimda kullanmistir.

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs