CVE-2024-38189
HIGH CISA KEVDescription
Microsoft Project Remote Code Execution Vulnerability
CVSS v3.1 Score
CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| microsoft | 365_apps |
| microsoft | office_2019 |
| microsoft | office_2019 |
| microsoft | office_long_term_servicing_channel |
| microsoft | office_long_term_servicing_channel |
| microsoft | project_2016 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-38189? +
How severe is CVE-2024-38189? +
What products are affected by CVE-2024-38189? +
How do I check if I'm vulnerable to CVE-2024-38189? +
Related Vulnerabilities
Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is …
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in …
A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input. Maliciously structured …
An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a …
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate …
Cinny is a Matrix client. Prior to 4.10.3, A remote authenticated attacker who shares a room with a victim and …