CVE-2024-38189 — Vulnetix

CVE-2024-38189 PUBLISHED KEV

In Microsoft Office, Microsoft 365 Apps, Microsoft Office 2019, Microsoft Outlook 2016, Microsoft PowerPoint 2016, Microsoft Project 2016 und Microsoft Teams bestehen mehrere Schwachstellen. Ein lokaler oder entfernter Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen und das Opfer zu täuschen. Einige der Sicherheitslücken erfordern eine Benutzerinteraktion, um erfolgreich ausgenutzt zu werden.

EPSS 43.66% · 97.6th percentile

Risk Scores

EPSS Score

43.66%

97.6th percentile

Affected Products

Vendor	Product	Versions
Microsoft	Microsoft Outlook 2016
Microsoft	Microsoft Office LTSC 2021
Microsoft	Microsoft Office LTSC for Mac 2021
Microsoft	Microsoft Teams iOS
Microsoft	Microsoft PowerPoint 2016
Microsoft	Microsoft Office 2019
Microsoft	Microsoft Project 2016
Microsoft	Microsoft 365 Apps
Microsoft	Microsoft Office OfficePLUS

Exploit Intelligence

https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1 (msrc)
CIRCL seen: CVE-2024-38189 (circl-sighting)
CIRCL seen: CVE-2024-38189 (circl-sighting)
CIRCL seen: CVE-2024-38189 (circl-sighting)
CIRCL exploited: CVE-2024-38189 (circl-sighting)
CIRCL seen: CVE-2024-38189 (circl-sighting)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38189 (circl)
Microsoft Project Remote Code Execution Vulnerability (circl)
Microsoft Project Remote Code Execution Vulnerability (Microsoft Project) (gpz)
Microsoft Project Remote Code Execution Vulnerability (Microsoft Project) (gpz)

…and 52 more exploits

Timeline

Aug 13, 2024 CISA KEV Added
Aug 13, 2024 PoC Published
Aug 13, 2024 CVE Published
Aug 13, 2024 PoC Published
Aug 13, 2024 PoC Published
Aug 14, 2024 EPSS Score
Aug 14, 2024 PoC Published
Sep 4, 2024 EPSS Score
Sep 25, 2024 EPSS Score
Oct 4, 2024 Coalition ESS Score
Nov 5, 2024 EPSS Score
Nov 26, 2024 EPSS Score

References

Open in Interactive Console →