{"metadata": {"vulnerability": "cve-2024-30103", "count": 48, "kinds": {"milestone": 9, "sighting": 14, "kev": 0, "other": 25}}, "data": [{"timestamp": "2024-03-22T23:12:15.573Z", "date_only": false, "value": "2024-03-22T23:12:15.573Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-30103", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-03T05:02:29.302Z", "date_only": false, "value": "2024-04-03T05:02:29.302535Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-30103", "record": "GSD-2024-30103", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-11T00:00:00Z", "date_only": true, "value": "2024-06-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0485", "record": "CERTFR-2024-AVI-0485", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-06-11T07:00:00Z", "date_only": false, "value": "2024-06-11T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-30103", "record": "MSRC_CVE-2024-30103", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-11T07:00:00Z", "date_only": false, "value": "2024-06-11T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-30103", "record": "MSRC_CVE-2024-30103", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-06-11T07:00:00Z", "date_only": false, "value": "2024-06-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-30103", "record": "MSRC_CVE-2024-30103", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-11T07:00:00Z", "date_only": false, "value": "2024-06-11T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-30103", "record": "MSRC_CVE-2024-30103", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-11T14:00:00Z", "date_only": false, "value": "2024-06-11T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2024-30103", "field": "containers.cna.datePublic"}, {"timestamp": "2024-06-11T17:00:04.279Z", "date_only": false, "value": "2024-06-11T17:00:04.279Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-30103", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-11T17:15:59Z", "date_only": false, "value": "2024-06-11T17:15:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-43R8-23M5-329F", "record": "GHSA-43R8-23M5-329F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-11T17:15:59.800Z", "date_only": false, "value": "2024-06-11T17:15:59.800", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-30103", "record": "FKIE_CVE-2024-30103", "field": "published"}, {"timestamp": "2024-06-11T18:20:51.628Z", "date_only": false, "value": "2024-06-11T18:20:51.628241Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0251", "record": "NCSC-2024-0251", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-11T18:20:51.628Z", "date_only": false, "value": "2024-06-11T18:20:51.628241Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0251", "record": "NCSC-2024-0251", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-11T18:20:51.628Z", "date_only": false, "value": "2024-06-11T18:20:51.628241Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0251", "record": "NCSC-2024-0251", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-11T18:30:49Z", "date_only": false, "value": "2024-06-11T18:30:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-43R8-23M5-329F", "record": "GHSA-43R8-23M5-329F", "field": "published"}, {"timestamp": "2024-06-11T18:30:49Z", "date_only": false, "value": "2024-06-11T18:30:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-43R8-23M5-329F", "record": "GHSA-43R8-23M5-329F", "field": "modified"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1340", "record": "WID-SEC-W-2024-1340", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1340", "record": "WID-SEC-W-2024-1340", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1340", "record": "WID-SEC-W-2024-1340", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1340", "record": "WID-SEC-W-2024-1340", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-12T00:00:00Z", "date_only": false, "value": "2024-06-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0485", "record": "CERTFR-2024-AVI-0485", "field": "last_revision_date"}, {"timestamp": "2024-06-12T00:00:00Z", "date_only": false, "value": "2024-06-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0485", "record": "CERTFR-2024-AVI-0485", "field": "initial_release_date"}, {"timestamp": "2024-06-12T00:00:00Z", "date_only": false, "value": "2024-06-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0485", "record": "CERTFR-2024-AVI-0485", "field": "revisions.0.revision_date"}, {"timestamp": "2024-06-12T04:00:00Z", "date_only": false, "value": "2024-06-12T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1308", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "003c902d-d3c3-4f30-95de-7a85edd021e6", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1308"}, {"timestamp": "2024-06-12T10:56:29Z", "date_only": false, "value": "2024-06-12T10:56:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/2289", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "dc763b00-b33b-4c3f-b4d2-c33507f6d4af", "content": "\u200aYou\u2019ve Got Mail: Critical Microsoft Outlook Vulnerability Executes as Email is Opened\n\nhttps://blog.morphisec.com/cve-2024-30103-microsoft-outlook-vulnerability", "url": "https://t.me/HackingInsights/2289"}, {"timestamp": "2024-06-13T00:00:00Z", "date_only": false, "value": "2024-06-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-30103", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-13T00:00:00Z", "date_only": false, "value": "2024-06-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-30103", "record": "FKIE_CVE-2024-30103", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-13T09:43:24Z", "date_only": false, "value": "2024-06-13T09:43:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/binary_xor/1388", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "351f32e7-291a-475d-b74e-c2c8e3247d8b", "content": "#outlook #rce\n\nCritical Microsoft Outlook Vulnerability Executes as Email is Opened\n\nhttps://blog.morphisec.com/cve-2024-30103-microsoft-outlook-vulnerability", "url": "https://t.me/binary_xor/1388"}, {"timestamp": "2024-06-13T10:33:43Z", "date_only": false, "value": "2024-06-13T10:33:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/1300", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "9c9d97ae-2a92-40b9-828d-7896221e21aa", "content": "\ud83e\ude79\ud83e\ude79\ud83e\ude79 \u0418\u044e\u043d\u044c\u0441\u043a\u0438\u0439 Patch Tuesday: \u0431\u0435\u0437 \u0447\u0443\u0434\u0435\u0441\n\n\u0421\u0432\u0435\u0436\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0437\u0430\u043f\u043b\u0430\u0442\u043e\u043a \u0438\u0437 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 58 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 7 \u0432 Chromium/Edge), \u043d\u0438 \u043e\u0434\u0438\u043d \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e. \u0422\u043e\u043b\u044c\u043a\u043e \u043e\u0434\u043d\u0430 CVE \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u0435\u0449\u0451 38 \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u0438 12 - \u0441\u0440\u0435\u0434\u043d\u0438\u0439.\n\n\u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0447\u0438\u0441\u043b\u043e \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 EoP \u043e\u043f\u0435\u0440\u0435\u0434\u0438\u043b\u043e \u0432\u0441\u0435 \u043f\u0440\u043e\u0447\u0438\u0435. \u041e\u0431\u0449\u0438\u0439 \u0441\u0447\u0451\u0442 \u0442\u0430\u043a\u043e\u0432: EoP - 25, RCE - 18, DoS - 5, \u0435\u0449\u0451 3 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2023-50868, \u0430\u0442\u0430\u043a\u0430 Keytrap, \u043f\u0430\u0440\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0430\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 DNSSEC. \u041d\u0435\u0432\u0437\u0438\u0440\u0430\u044f \u043d\u0430 \u043c\u0435\u0434\u0438\u0439\u043d\u044b\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0434\u044b\u0440\u044b \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-30080, CVSS 9.8) \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 MSMQ, \u043e\u043d\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e MSMQ \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0440\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0432\u044b\u0441\u043e\u043a.\n\n\u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 CVE-2024-30064 \u0438 -30068, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u043a EoP \u0432 \u044f\u0434\u0440\u0435 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. \u0414\u0440\u0443\u0433\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0449\u0430\u044f RCE - CVE-2024-30103 \u0432 Outlook, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u0438\u0437 \u043f\u0430\u043d\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 DLL \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n #\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1300"}, {"timestamp": "2024-06-13T11:43:24Z", "date_only": false, "value": "2024-06-13T11:43:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/binary_xor/883", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "06ca05d6-8580-4471-b84b-d47ba210bdc8", "content": "#outlook #rce\n\nCritical Microsoft Outlook Vulnerability Executes as Email is Opened\n\nhttps://blog.morphisec.com/cve-2024-30103-microsoft-outlook-vulnerability", "url": "https://t.me/binary_xor/883"}, {"timestamp": "2024-06-13T12:47:55Z", "date_only": false, "value": "2024-06-13T12:47:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bizone_channel/1268", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "f622d6fe-b0f2-4192-8219-167a11f93491", "content": "\ud83d\udd3a \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Outlook: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u00a0\u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430\n\n\u041d\u0430 \u0434\u043d\u044f\u0445 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-30103 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Microsoft Outlook \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 8,8.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f Microsoft Outlook \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043d\u0435\u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-30103 \u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0442 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c \u043f\u0438\u0441\u044c\u043c\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0435 \u0447\u0440\u0435\u0437\u0432\u044b\u0447\u0430\u0439\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438.\n\n\u041f\u043e\u043a\u0430 \u0447\u0442\u043e \u0432 \u0441\u0435\u0442\u0438 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043d\u043e\u0432\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Microsoft Outlook.\u00a0Proof-of-\u0441oncept \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEFCON 32.\n\nMicrosoft \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438\u00a0Outlook \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 16.0.5452.1000.\n\n\u041c\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0430\u0433\u0435\u043d\u0442 Microsoft Outlook \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043a\u00a0\u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u0443\u044e \u043f\u043e\u0447\u0442\u0443.", "url": "https://t.me/bizone_channel/1268"}, {"timestamp": "2024-06-13T13:47:26Z", "date_only": false, "value": "2024-06-13T13:47:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5848", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "6fa9e131-b790-464f-9ddc-07193eb609ce", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u0439 PatchTuesday \u043e\u0442 Microsoft \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 51 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 18 RCE \u0438 0-day, \u0430 \u0442\u0430\u043a\u0436\u0435 7 - \u0432 Chromium/Edge.\n\n\u041a \u0443\u0434\u0438\u0432\u043b\u0435\u043d\u0438\u044e, \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0430 CVE \u0432 Microsoft Message Queuing \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u0435\u0449\u0451 38 \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u0438 12 - \u0441\u0440\u0435\u0434\u043d\u0438\u0439, \u0430 \u0432 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u043f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c \u043f\u0440\u0435\u0432\u0430\u043b\u0438\u0440\u0443\u0435\u0442 EoP - 25 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0435\u043c \u0443\u0436\u0435 18 - RCE, 5 - DoS \u0438 3 - \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u043d\u0443\u043b\u044c - CVE-2023-50868 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 DNS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0430\u0442\u0430\u043a\u0443 Keytrap, \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u043e \u043c\u043d\u043e\u0433\u043e \u0448\u0443\u043c\u0438\u0445\u0438, \u043d\u043e \u0434\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043b\u043e\u0441\u043a\u043e\u0441\u0442\u0438 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0434\u043e\u0448\u043b\u043e.\n\n\u041e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-30080 \u0441 CVSS 9.8) \u0432 MSMQ \u043d\u0435 \u0433\u0440\u043e\u0437\u0438\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0414\u0440\u0443\u0433\u043e\u0439 \u0432\u0430\u0436\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, CVE-2024-30103 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0447\u0435\u0440\u043d\u044b\u0435 \u0441\u043f\u0438\u0441\u043a\u0438 \u0440\u0435\u0435\u0441\u0442\u0440\u0430  Microsoft Outlook \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b DLL.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0438\u0437 \u043f\u0430\u043d\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u043d\u0435\u0432\u0435\u043b\u0438\u043a\u0430 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0430 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043e\u0447\u0435\u043d\u044c \u043f\u0440\u043e\u0441\u0442\u043e.\n\n\u0412\u0441\u0451 \u044d\u0442\u043e \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Morphisec, \u043f\u0440\u0435\u0434\u0432\u0435\u0449\u0430\u0435\u0442 \u043d\u0430\u0447\u0430\u043b\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Microsoft Office \u0438 EoP-\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u044f\u0434\u0440\u0435 Windows.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043d\u0430 \u0432\u043b\u0438\u044f\u0435\u0442, - \u0437\u0434\u0435\u0441\u044c.", "url": "https://t.me/true_secator/5848"}, {"timestamp": "2024-06-13T18:50:28Z", "date_only": false, "value": "2024-06-13T18:50:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/13148", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "989304d8-ba04-43cc-8432-7b03cedcc02c", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 \ud83c\udd98 CVE-2024-30103: Critical Microsoft Outlook Zero-Click RCE Flaw Executes as Email is Opened.\n\nhttps://cybersecuritynews.com/microsoft-outlook-zero-click-rce-flaw/", "url": "https://t.me/cKure/13148"}, {"timestamp": "2024-06-13T19:03:28Z", "date_only": false, "value": "2024-06-13T19:03:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hackingbra/163", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "2cfe66f9-0b75-421c-b68e-23ba9bbec809", "content": "CVE-2024-30103: Critical Microsoft Outlook Zero-Click RCE Flaw Executes as Email is Opened.\n\nhttps://cybersecuritynews.com/microsoft-outlook-zero-click-rce-flaw/", "url": "https://t.me/hackingbra/163"}, {"timestamp": "2024-06-14T00:00:00Z", "date_only": true, "value": "2024-06-14", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-28699", "record": "CNVD-2024-28699", "field": "submitTime"}, {"timestamp": "2024-06-25T00:00:00Z", "date_only": true, "value": "2024-06-25", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-28699", "record": "CNVD-2024-28699", "field": "openTime"}, {"timestamp": "2024-08-02T01:25:02.885Z", "date_only": false, "value": "2024-08-02T01:25:02.885Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-30103", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-12T13:33:20Z", "date_only": false, "value": "2024-08-12T13:33:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/217", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "86314d09-85b2-430e-9fb6-750427419849", "content": "\ud83e\udd77\ud83c\udffb DEFCON 32 is over and you can find the links on the interesting researches (in our view) below:\n\n\ud83d\uded1SQL Injection Isn't Dead. Smuggling Queries at the Protocol Level\n\n\ud83d\uded1A TWO-PART SAGA: CONTINUING THE JOURNEY OF HACKING MALWARE C2S\n\n\ud83d\uded1Outlook Unleashing RCE Chaos: CVE-2024-30103 & CVE-2024-38021\n\n\ud83d\uded1Gotta Cache \u2018em all: Bending the rules of web cache exploitation\n\n\ud83d\uded1NTLM: the last ride\n\n\ud83d\uded1HookChain: a new perspective for Bypassing EDR Solutions\n\n\ud83d\uded1sshamble: Unexpected Exposures in SSH\n\n\ud83d\uded1MaLDAPtive LDAP Obfuscation Deobfuscation and Detection\n\n\ud83d\uded1Iconv, set the charset to RCE: exploiting the glibc to hack the PHP engine\n\n\ud83d\uded1Techniques for Creating Process Injection Attacks with Advanced Return-Oriented Programming\n\nAll presentations from DEFCON32: https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/", "url": "https://t.me/ptswarm/217"}, {"timestamp": "2024-08-12T15:58:24Z", "date_only": false, "value": "2024-08-12T15:58:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/4295", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "9b609d24-c5b6-4c7b-ad53-d08506880559", "content": "\ud83e\udd77\ud83c\udffb DEFCON 32 is over and you can find the links on the interesting researches (in our view) below:\n\n\ud83d\uded1SQL Injection Isn't Dead. Smuggling Queries at the Protocol Level\n\n\ud83d\uded1A TWO-PART SAGA: CONTINUING THE JOURNEY OF HACKING MALWARE C2S\n\n\ud83d\uded1Outlook Unleashing RCE Chaos: CVE-2024-30103 & CVE-2024-38021\n\n\ud83d\uded1Gotta Cache \u2018em all: Bending the rules of web cache exploitation\n\n\ud83d\uded1NTLM: the last ride\n\n\ud83d\uded1HookChain: a new perspective for Bypassing EDR Solutions\n\n\ud83d\uded1sshamble: Unexpected Exposures in SSH\n\n\ud83d\uded1MaLDAPtive LDAP Obfuscation Deobfuscation and Detection\n\n\ud83d\uded1Iconv, set the charset to RCE: exploiting the glibc to hack the PHP engine\n\n\ud83d\uded1Techniques for Creating Process Injection Attacks with Advanced Return-Oriented Programming\n\nAll presentations from DEFCON32: https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/", "url": "https://t.me/poxek/4295"}, {"timestamp": "2024-08-14T03:55:52.716Z", "date_only": false, "value": "2024-08-14T03:55:52.716Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-30103", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:10:02.511Z", "date_only": false, "value": "2024-08-15T18:10:02.511+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1340", "record": "WID-SEC-W-2024-1340", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-11T02:29:01Z", "date_only": false, "value": "2024-11-11T02:29:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/club31337/2323", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "2159eb23-26e5-4e25-aa02-e7964e323da1", "content": "https://blog.morphisec.com/cve-2024-38021-microsoft-outlook-moniker-rce-vulnerability\n\n#ZeroClick #RCE #Outlook\n\nUnlike the previously discovered vulnerability CVE-2024-30103 disclosed in June - which required authentication (at least an NTLM token) - this new vulnerability does not require any authentication. \nIt requires 0clicks for known senders else 1\n\n\u269c\ufe0f @club1337", "url": "https://t.me/club31337/2323"}, {"timestamp": "2025-12-17T22:23:14.739Z", "date_only": false, "value": "2025-12-17T22:23:14.739Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-30103", "record": "MSRC_CVE-2024-30103", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-20T16:16:51.080Z", "date_only": false, "value": "2026-07-20T16:16:51.080", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-30103", "record": "FKIE_CVE-2024-30103", "field": "lastModified"}, {"timestamp": "2026-07-26T02:00:19.382Z", "date_only": false, "value": "2026-07-26T02:00:19.382788Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/494", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "b8ce5469-94ca-469d-ac4b-becfb8816929", "url": "https://t.me/cyberwarehouse/494"}, {"timestamp": "2026-07-27T00:00:22.563Z", "date_only": false, "value": "2026-07-27T00:00:22.563094Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/494", "record": "CVE-2024-30103", "field": "creation_timestamp", "uuid": "20ea78eb-8d2d-44a9-a515-8e4adaeb7e38", "url": "https://t.me/cyberwarehouse/494"}, {"timestamp": "2026-08-10T15:12:25.606Z", "date_only": false, "value": "2026-08-10T15:12:25.606Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-30103", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T15:12:25.606Z", "date_only": false, "value": "2026-08-10T15:12:25.606Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2024-30103", "field": "containers.cna.providerMetadata.dateUpdated"}]}