RCE in Microsoft Project
CVE-2024-38189 Published on August 13, 2024

Microsoft Project Remote Code Execution Vulnerability

Vendor Advisory NVD

Known Exploited Vulnerability

This Microsoft Project Remote Code Execution Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.

The following remediation steps are recommended / required by September 3, 2024: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vulnerability Analysis

CVE-2024-38189 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.


Products Associated with CVE-2024-38189

You can be notified by stack.watch whenever vulnerabilities like CVE-2024-38189 are published in these products:

Microsoft Office
 
Microsoft 365 Apps
 
Microsoft Office Long Term Servicing Channel
 
Microsoft Project 2016
 

What versions are vulnerable to CVE-2024-38189?