CVE-2024-30103
Published: 11 June 2024
Summary
CVE-2024-30103 is a high-severity Incomplete List of Disallowed Inputs (CWE-184) vulnerability in Microsoft 365 Apps. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 5.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Microsoft Outlook contains a remote code execution vulnerability tracked as CVE-2024-30103. The flaw received a CVSS 3.1 score of 8.8 with an attack vector of network, low attack complexity, low privileges required, and no user interaction required, resulting in high impact to confidentiality, integrity, and availability. It is associated with CWE-184 and was published on 11 June 2024.
An authenticated attacker with low privileges can exploit the issue over the network to execute arbitrary code on an affected Outlook installation, achieving full control over the victim's mailbox and local system resources.
Microsoft has published mitigation guidance in its Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30103, which includes details on available patches and recommended defensive measures.
The associated EPSS score currently stands at 0.1496 with a recorded peak of 0.1541, indicating moderate and relatively stable exploitation interest since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-28040
Vulnerability details
Microsoft Outlook Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Spam filters rely on evolving blacklists, signatures, and heuristics of disallowed message patterns; keeping them updated per the control directly mitigates incomplete disallowed-input lists.