⚠️ Update for CVE-2024-21413 💣 Managed & confirmed Microsoft Outlook Remote Code Execution (RCE) but won't publish details (yet).

Given that I don't see myself as particularly intelligent and yet managed to achieve this, it stands to reason that more skilled individuals are surely on the brink of similar discoveries. This suggests that Microsoft may need to revise their security advisories shortly.

NICE!!!

🤔 I don't it... Didn't you already published a PoC on Github ?

Without the RCE, yes.

I can only imagine the impact... q.q

@HaifeiLi

Congrats 🎉

Single click takeover?

NTLM Leak can be 0-click (thx @johntroony) - will update the repo tonight.

W0W congratulations 🎊