CVE-2022-24480
CVSS 3.1 Score 6.3 of 10 (medium)
Details
Published Dec 13, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-24480 is an elevation of privilege vulnerability affecting Microsoft Outlook for Android. An attacker could exploit this flaw to gain elevated access to a victim's device by sending a specially crafted email. Successful exploitation could allow the attacker to perform actions beyond their normal permissions, potentially compromising the security of the affected system. Microsoft has released a patch to address this vulnerability, and users are strongly encouraged to install it as soon as possible to protect against potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Office Outlook
Affected Vendors
- Microsoft