← Back to browse · API

CVE-2024-38226

Severity
HIGH
CVSS
7.3
EPSS
0.02667
Risk score
55.13
CISA KEV
Yes
PoC
No
Published
2024-09-10
Modified
2024-09-10
First seen
2026-08-07
Aliases
EUVD-2024-37192, GHSA-RF2V-QJ9W-X393
Products
Microsoft:Microsoft Office 2019 19.0.0 <https://aka.ms/OfficeSecurityReleases, Microsoft:Microsoft Office LTSC 2021 16.0.1 <https://aka.ms/OfficeSecurityReleases, Microsoft:Microsoft Publisher 2016 16.0.0 <16.0.5465.1001, Microsoft:Publisher
Sources
euvd EUVD-2024-37192
cisa.gov CVE-2024-38226

Description

Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.

References