CVE-2024-21413 | Netskope Threat Labs

Description

This detection identifies exploitation attempts targeting CVE-2024-21413, which has a CRITICAL severity rating. Microsoft's advisory names this issue the Microsoft Outlook Remote Code Execution Vulnerability, a flaw that lets cyberattackers execute code through specially crafted email messages, including when a user previews the message in the Outlook preview pane.

Stats

First seen: March 2024
Last seen: October 2026

CVEs

CVE-2024-21413

Also known as

CVE_2024_21413

Alert name variants

Alert Name	Engine
Trojan.CVE_2024_21413.3.Gen	AV
Trojan.CVE-2024-21413.2.Gen	AV
Trojan.CVE-2024-21413.4.Gen	ATP Sandbox Adv. HeuristicsAV
Trojan.CVE-2024-21413.4.Gen:3C9CF	ATP Sandbox Adv. Heuristics
Trojan.CVE-2024-21413.4.Gen:4F62F	ATP Sandbox Adv. Heuristics
Trojan.CVE-2024-21413.4.Gen:6CE50	ATP Sandbox Adv. Heuristics
Trojan.CVE-2024-21413.4.Gen:6EE7A	ATP Sandbox Adv. Heuristics
Trojan.CVE-2024-21413.4.Gen:760C7	ATP Sandbox Adv. Heuristics
Trojan.CVE-2024-21413.4.Gen:7783C	ATP Sandbox Adv. Heuristics
Trojan.CVE-2024-21413.4.Gen:B84D0	ATP Sandbox Adv. Heuristics
Trojan.CVE-2024-21413.4.Gen:E40BF	ATP Sandbox Adv. Heuristics
Trojan.CVE-2024-21413.4.Gen:EB57C	ATP Sandbox Adv. Heuristics

Related IPS Signatures

Signature Name	Engine
FILE-OFFICE Microsoft Outlook remote code execution attempt	IPS-CFW

Related families

Microsoft

References

nvd.nist.gov