CVE Number | Vulnerability | Product | Severity | Date |
---|---|---|---|---|
CVE-2024-38200 | Microsoft Office Spoofing Vulnerability | Microsoft Office | Important | 10-09-2024 |
Technical Information
A spoofing vulnerability in Microsoft Office where an attacker could create and host a malicious file on a compromised website and convinces a user to open it. Then the attacker could gain access to the user’s NTLM credentials.
Patch release date: Aug 13, 2024
Further information on this vulnerability is available at : CVE-2024-38200
Affected Software
Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit editions,
Microsoft 365 Apps for Enterprise for 32-bit Systems,
Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office 2016 (32-bit edition),
Microsoft Office 2016 (64-bit edition)