Skip to main content

Office 2019 CVE-2024-38226

HIGH
Protection Mechanism Failure (CWE-693)
2024-09-10 secure@microsoft.com
7.3
CVSS 3.1 · Vendor: microsoft
Share

Severity by source

Vendor (microsoft) PRIMARY
7.3 HIGH
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Added to CISA KEV
Jul 14, 2026 - 04:22 CISA
CVE Published
Sep 10, 2024 - 17:15 cve.org
HIGH 7.3

DescriptionCVE.org

Microsoft Publisher Security Feature Bypass Vulnerability

AnalysisAI

Microsoft Publisher Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-693. Affected products include: Microsoft Office 2019, Microsoft Office Long Term Servicing Channel, Microsoft Publisher.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2024-21413 CRITICAL POC
9.8 Feb 13

Microsoft Outlook Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotel

CVE-2026-63525 HIGH
7.8 Aug 11

Code execution in Microsoft Word stems from a numeric truncation error (CWE-197) in the document processing engine, affe

CVE-2026-63518 HIGH
7.8 Aug 11

Heap-based buffer overflow in Microsoft Office Word enables arbitrary local code execution when a user opens a specially

CVE-2026-64907 HIGH
7.8 Aug 11

Stack-based buffer overflow in Microsoft Office Word enables local arbitrary code execution when a user opens a maliciou

CVE-2026-70311 HIGH
7.8 Aug 11

Use-after-free memory corruption in Microsoft Office Word enables local code execution when a user opens a specially cra

CVE-2026-64915 HIGH
7.8 Aug 11

Heap-based buffer overflow in Microsoft Office Word enables local code execution with High confidentiality, integrity, a

CVE-2026-64905 HIGH
7.8 Aug 11

Code execution via buffer over-read in Microsoft Office Word affects multiple Windows and Mac Office product lines when

CVE-2026-63527 HIGH
7.8 Aug 11

Stack-based buffer overflow in Microsoft Office Word enables arbitrary code execution when a victim opens a specially cr

CVE-2026-66806 MEDIUM
5.5 Aug 11

Information disclosure in Microsoft Word via an off-by-one out-of-bounds read (CWE-125) exposes high-confidentiality dat

CVE-2026-70319 MEDIUM
5.5 Aug 11

Microsoft Office Word's document parsing logic fails to properly validate input (CWE-20), enabling a local attacker to r

CVE-2026-63530 MEDIUM
5.5 Aug 11

Out-of-bounds read in Microsoft Office Word's document parser enables local information disclosure across Windows and Ma

CVE-2026-63521 MEDIUM
5.5 Aug 11

Out-of-bounds read in Microsoft Office Word exposes high-confidentiality memory contents when a user opens a specially c

Share

CVE-2024-38226 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy