---
id: 7828
title: "CVE-2024-21378 — Remote Code Execution in Microsoft Outlook"
cve: CVE-2024-21378
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/red-teaming/microsoft-outlook-remote-code-execution-cve-2024-21378/"
published_at: "2024-03-11T00:00:00Z"
tags: ["rce", "microsoft", "red-team", "outlook", "cve-2024-21378", "mapi", "ruler"]
phying_url: "https://phying.com/item/7828"
lang: en
---

# CVE-2024-21378 — Remote Code Execution in Microsoft Outlook

## Summary

NetSPI details CVE-2024-21378, authenticated RCE in Microsoft Outlook via synced form objects that sidestep the 2017 script allowlisting patch, weaponized through an updated Ruler pentesting tool.

## Intelligence Metadata

- **Sources:** netspi.com
- **CVE:** CVE-2024-21378
- **Published:** 2024-03-11T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/red-teaming/microsoft-outlook-remote-code-execution-cve-2024-21378/
- **Phying News:** https://phying.com/item/7828