Office 2019
CVE-2024-38226
HIGH
Severity by source
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Primary rating from Vendor (microsoft) · only source for this CVE.
CVSS VectorVendor: microsoft
Lifecycle Timeline
2DescriptionCVE.org
Microsoft Publisher Security Feature Bypass Vulnerability
AnalysisAI
Microsoft Publisher Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-693. Affected products include: Microsoft Office 2019, Microsoft Office Long Term Servicing Channel, Microsoft Publisher.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Office 2019
View allMicrosoft Outlook Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotel
Code execution in Microsoft Word stems from a numeric truncation error (CWE-197) in the document processing engine, affe
Heap-based buffer overflow in Microsoft Office Word enables arbitrary local code execution when a user opens a specially
Stack-based buffer overflow in Microsoft Office Word enables local arbitrary code execution when a user opens a maliciou
Use-after-free memory corruption in Microsoft Office Word enables local code execution when a user opens a specially cra
Heap-based buffer overflow in Microsoft Office Word enables local code execution with High confidentiality, integrity, a
Code execution via buffer over-read in Microsoft Office Word affects multiple Windows and Mac Office product lines when
Stack-based buffer overflow in Microsoft Office Word enables arbitrary code execution when a victim opens a specially cr
Information disclosure in Microsoft Word via an off-by-one out-of-bounds read (CWE-125) exposes high-confidentiality dat
Microsoft Office Word's document parsing logic fails to properly validate input (CWE-20), enabling a local attacker to r
Out-of-bounds read in Microsoft Office Word's document parser enables local information disclosure across Windows and Ma
Out-of-bounds read in Microsoft Office Word exposes high-confidentiality memory contents when a user opens a specially c
Same weakness CWE-693 – Protection Mechanism Failure
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today