Microsoft Outlook had a critical zero-click RCE vulnerability

A critical zero-click RCE vulnerability, CVE-2024-38021, was discovered in Microsoft Outlook, affecting most applications. Microsoft has patched the flaw, distinguishing trusted senders as zero-click and untrusted ones requiring one-click interaction. Morphisec urged Microsoft to reclassify the vulnerability as "Critical" due to higher risk. The flaw was reported on April 21, confirmed on April 26, and patched on July 9, 2024. Updating software and enhancing email security measures are crucial.