This vulnerability, designated as CVE-2024-30103, enables attackers to run arbitrary code by sending a specially designed email. When the recipient opens the email, the exploit is triggered.
The vulnerability, CVE-2024-30103, is particularly alarming due to its zero-click nature. Unlike traditional phishing attacks that require user interaction, this flaw can be exploited without any action from the user.
Opening the malicious email alone is enough to compromise the system, making it a powerful weapon for cybercriminals and greatly reducing the barriers to successful exploitation.