7.3

CVE-2024-38226

Warnung

Microsoft Publisher Security Feature Bypass Vulnerability

Microsoft Publisher Security Feature Bypass Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Office 2019 Version - HwPlatform x64
Microsoft ≫ Office 2019 Version - HwPlatform x86
Microsoft ≫ Office Long Term Servicing Channel Version 2021 HwPlatform x64
Microsoft ≫ Office Long Term Servicing Channel Version 2021 HwPlatform x86
Microsoft ≫ Publisher Version 2016 HwPlatform x64
Microsoft ≫ Publisher Version 2016 HwPlatform x86

10.09.2024: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Publisher Protection Mechanism Failure Vulnerability

Schwachstelle

Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.

Beschreibung

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.67% 0.838
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Microsoft 7.3 1.3 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38226
Patch
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38226
US Government Resource