CVE-2024-38226
Microsoft Publisher Protection Mechanism Failure Vulnerability
CVSS
—
Sin CVSS
EPSS
2.7%
p84
KEV
SÍ
10 sept 2024
Exploit Today
75
0-100
Publicado: — · Última mod.: —
Producto
Microsoft / Publisher
Vulnerabilidad
Microsoft Publisher Protection Mechanism Failure Vulnerability
Añadido a KEV
10 sept 2024
Remediar antes de
1 oct 2024
Uso conocido en ransomware
No
Descripción resumida
Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.
Acción requerida
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38226; https://nvd.nist.gov/vuln/detail/CVE-2024-38226
Sin CVEs relacionados por CWE o producto.