<< Back
CVE Number Vulnerability Product Severity Date
CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability MIcrosoft Office Microsoft Publisher Important 19-09-2024

Technical Information

In this vulnerability, an authenticated attacker may craft a malicious file and convinces the user to open the file locally on the system leading to bypass the Office macro policies that is used to block untrusted or malicious files.
This vulnerability has been exploited in the wild.

Patch release date: Sep 09, 2024
Further information on this vulnerability is available at : CVE-2024-38226

Affected Software

Microsoft Office 2019 for 32-bit editions,
Microsoft Office 2019 for 64-bit editions,
Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Publisher 2016 (32-bit edition),
Microsoft Publisher 2016 (64-bit edition)