microsoft office CVE-2024-38226 vulnerability in Microsoft Products
Published on September 10, 2024

product logo product logo
Microsoft Publisher Security Feature Bypass Vulnerability

Vendor Advisory NVD

Known Exploited Vulnerability

This Microsoft Publisher Security Feature Bypass Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Microsoft Publisher contains a security feature bypass vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.

The following remediation steps are recommended / required by October 1, 2024: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vulnerability Analysis

CVE-2024-38226 is exploitable with local system access, requires user interaction and a small amount of user privileges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.3 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.


Products Associated with CVE-2024-38226

You can be notified by stack.watch whenever vulnerabilities like CVE-2024-38226 are published in these products:

Microsoft Office
 
Microsoft Publisher
 

What versions are vulnerable to CVE-2024-38226?