PULSE
ES
FEED
ransomn0n reclama a Prafesta Ind. e Com. de Embalagens Ltda · BR · Manufacturingransomplay reclama a WSBI-ESBG · BE · Financial Servicesransomplay reclama a New Tec Tool Limited · HK · Manufacturingransomplay reclama a MicroSearch Corporation · Technologyransomplay reclama a Pure Options · Financial Servicesransomredact reclama a ONEOK, Inc. · US · Energy & Utilitiesransomvexy ransomware reclama a Data-Core Systems · Technologyransomwallstreet reclama a Girl Scouts of Eastern Massachusetts · US · Educationransomn0n reclama a Company #80 · Not Foundransomn0n reclama a Company #79 · US · Not Foundransomn0n reclama a Company #78 · Not Foundransomn0n reclama a Company #77 · US · Not Foundransomn0n reclama a Company #76 · US · Not Foundransomn0n reclama a Company #72 · Not Foundransomn0n reclama a Prafesta Ind. e Com. de Embalagens Ltda · BR · Manufacturingransomplay reclama a WSBI-ESBG · BE · Financial Servicesransomplay reclama a New Tec Tool Limited · HK · Manufacturingransomplay reclama a MicroSearch Corporation · Technologyransomplay reclama a Pure Options · Financial Servicesransomredact reclama a ONEOK, Inc. · US · Energy & Utilitiesransomvexy ransomware reclama a Data-Core Systems · Technologyransomwallstreet reclama a Girl Scouts of Eastern Massachusetts · US · Educationransomn0n reclama a Company #80 · Not Foundransomn0n reclama a Company #79 · US · Not Foundransomn0n reclama a Company #78 · Not Foundransomn0n reclama a Company #77 · US · Not Foundransomn0n reclama a Company #76 · US · Not Foundransomn0n reclama a Company #72 · Not Found
← All CVEs
CVE Watch—

CVE-2024-38189

Microsoft Project Remote Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

8.2%

p95

KEV

YES

Aug 13, 2024

Exploit Today

78

0-100

Published: — · Last modified: —

EPSS · 30d
8.2%EPSS · 30 days8.2%
2026-09-182026-10-16
KEV catalog record

Product

Microsoft / Project

Vulnerability

Microsoft Project Remote Code Execution Vulnerability

Added to KEV

Aug 13, 2024

Remediate by

Sep 3, 2024

Known ransomware use

No

Summary description

Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38189; https://nvd.nist.gov/vuln/detail/CVE-2024-38189

Related CVEs

No related CVEs by CWE or product.