Skip to content
OpenAdvisories
High MSRC-CVE-2024-21402 1 CVE

Microsoft Outlook Elevation of Privilege Vulnerability

Published Feb 13, 2024 · Updated Feb 13, 2024

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H) and major loss of integrity (I:H) but have no effect on availability (A:N). What does that mean for this vulnerability?
Exploiting this vulnerability could allow an attacker to disclose files and modify data, but the attacker cannot impact the availability of the files.

What privileges could be gained by an attacker who successfully exploited the vulnerability?
The attacker would gain the rights of the user that is running the affected application.

Security updates
https — https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References