New Outlook Exploit Zero-Click RCE Vulnerability Exposed

**Executive summary:** Research identified a critical Outlook vulnerability (CVE-2024-38021) that can leak local NTLM credentials and enable remote code execution by abusing composite monikers in hyperlinks; Microsoft patched related issues (including CVE-2024-21413) by blocking composite moniker parsing in some contexts, but residual attack paths remain and defenders may need virtual or additional mitigations while applying official updates.