VDB

GCVE-VVD-NCSC-2024-251

GCVE-VVD-NCSC-2024-251
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published June 11, 2024
Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.

Weaknesses (CWE)

CWE-426Untrusted Search PathCWE-416Use After FreeCWE-184Incomplete List of Disallowed InputsCWE-59Improper Link Resolution Before File Access ('Link Following')

Risk Scores

CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
microsoftmicrosoft_sharepoint_enterprise_server_2016
microsoftmicrosoft_sharepoint_server_2019
microsoftmicrosoft_sharepoint_server_subscription_edition
microsoftsharepoint_server
microsoftmicrosoft_365_apps_for_enterprise
microsoftmicrosoft_office_2019
microsoftmicrosoft_office_ltsc_2021
microsoftmicrosoft_office_2016
microsoftoffice
microsoftmicrosoft_outlook_2016
microsoftoutlook

References

advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›