CVE-2024-26204

CWE-77 — Command Injection4 documents4 sources
Severity
7.5HIGH
EPSS
2.4%
top 14.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Microsoft Outlook FOR AndroidMicrosoft Outlook
Timeline
PublishedMar 12

Description

Outlook for Android Information Disclosure Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5microsoft/microsoft_outlook_for_android1.0 — 4.2404.0
▶NVDmicrosoft/outlook< 4.2404.0

🔴Vulnerability Details

2
CVEList
Outlook for Android Information Disclosure Vulnerability↗2024-03-12
▶
GHSA
GHSA-5vc2-5pj4-gw6j: Outlook for Android Information Disclosure Vulnerability↗2024-03-12
▶

📋Vendor Advisories

1
Microsoft
Outlook for Android Information Disclosure Vulnerability↗2024-03-12
▶
CVE-2024-26204 (HIGH CVSS 7.5) | Outlook for Android Information Dis | cvebase.io