CVEDB API

Microsoft Project Remote Code Execution Vulnerability

Exploit prediction scoring system (EPSS) score

EPSS Score 0.38

EPSS Ranking 97.0%

CVSS Severity

CVSS v3 Score 8.8

Proposed Action

Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.

Ransomware Campaign

Unknown

References

Products affected by CVE-2024-38189

Microsoft » 365 Apps » Version: N/A

cpe:2.3:a:microsoft:365_apps:-
Microsoft » Office » Version: 2019

cpe:2.3:a:microsoft:office:2019
Microsoft » Office Long Term Servicing Channel » Version: 2021

cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021
Microsoft » Project 2016 » Version: N/A

cpe:2.3:a:microsoft:project_2016:-