New MonikerLink Flaw Exposes Outlook Users to Data Theft and Malware

Check Point Research disclosed a critical Outlook vulnerability (CVE-2024-21413, “#MonikerLink”) that misuses Windows COM and file:// hyperlinks to execute arbitrary code and exfiltrate NTLM credentials; the report describes three attack vectors (hyperlink, attachment, email-reading), potential system compromise and data theft, and advises patching and vigilance while Microsoft has been notified but not yet publicly responded.