VDB

GCVE-VVD-NCSC-2024-251

GCVE-VVD-NCSC-2024-251
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published June 11, 2024
Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.

Weaknesses (CWE)

CWE-426Untrusted Search PathCWE-416Use After FreeCWE-184Incomplete List of Disallowed InputsCWE-59Improper Link Resolution Before File Access ('Link Following')

Risk Scores

CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
microsoftmicrosoft_sharepoint_enterprise_server_2016——
microsoftmicrosoft_sharepoint_server_2019——
microsoftmicrosoft_sharepoint_server_subscription_edition——
microsoftsharepoint_server——
microsoftmicrosoft_365_apps_for_enterprise——
microsoftmicrosoft_office_2019——
microsoftmicrosoft_office_ltsc_2021——
microsoftmicrosoft_office_2016——
microsoftoffice——
microsoftmicrosoft_outlook_2016——
microsoftoutlook——

References

advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

2,368 records in the GCVE database · Updated October 3, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›