Vulnerability Details CVE-2024-38226
Microsoft Publisher Security Feature Bypass Vulnerability
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.6%
CVSS Severity
CVSS v3 Score 7.3
Proposed Action
Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.
Ransomware Campaign
Unknown
References
Products affected by CVE-2024-38226
-
cpe:2.3:a:microsoft:office_2019:-
-
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021
-
cpe:2.3:a:microsoft:publisher:2016