GCVE-VVD-NCSC-2024-365

Advisory PublishedCVSS 7.2/10

Vulnetix · Advisory published September 10, 2024

Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.

Weaknesses (CWE)

CWE-502Deserialization of Untrusted DataCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-126Buffer Over-readCWE-416Use After FreeCWE-693Protection Mechanism FailureCWE-285Improper AuthorizationCWE-284Improper Access Control

Risk Scores

CVSS 3.1

7.2/10

High · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

Vendor	Product	Versions	Platforms
microsoft	microsoft_sharepoint_enterprise_server_2016	—	—
microsoft	microsoft_sharepoint_server_2019	—	—
microsoft	microsoft_sharepoint_server_subscription_edition	—	—
microsoft	microsoft_office_ltsc_for_mac_2021	—	—
microsoft	microsoft_office_for_android	—	—
microsoft	microsoft_office_for_universal	—	—
microsoft	microsoft_office_2019	—	—
microsoft	microsoft_office_online_server	—	—
microsoft	microsoft_365_apps_for_enterprise	—	—
microsoft	microsoft_office_ltsc_2021	—	—
microsoft	microsoft_excel_2016	—	—
microsoft	microsoft_visio_2016	—	—
microsoft	microsoft_publisher_2016	—	—
microsoft	outlook_for_ios	—	—
microsoft	microsoft_autoupdate_for_mac	—	—

Aliases

CVE-2024-43465 CVE-2024-43482 CVE-2024-38227 CVE-2024-43464 CVE-2024-43466 CVE-2024-38228 CVE-2024-43492 CVE-2024-38250 CVE-2024-38226 CVE-2024-43463 CVE-2024-38018

Transitive aliases

CVE-2024-43495 CVE-2024-38238 GHSA-x9x8-4xvf-mwjp GHSA-pxwm-r9vq-x573 BDU:2024-07202 CVE-2024-38257 BDU:2024-06875 VVD-CISA-2024-43454 BDU:2024-07190 CVE-2024-38236 BDU:2024-07189 EUVD-2024-40726 EUVD-2024-40752 VVD-CISA-2024-38046 BDU:2024-07187 EUVD-2024-37224 BDU:2024-06873 CVE-2024-38252 GHSA-j5j6-f7rx-wf55 BDU:2024-07230 CVE-2024-38256 BDU:2024-07191 GHSA-xghp-74wc-wjg3 EUVD-2024-28010 EUVD-2024-37211 VVD-CISA-2024-38254 GHSA-xxq4-9c68-6533 GHSA-mp72-mr55-299x CVE-2024-38258 GHSA-9rp7-83cj-89pw EUVD-2024-37205 GHSA-mvjr-3jgq-45rj VVD-CISA-2024-38243 BDU:2024-07861 EUVD-2024-37194 BDU:2024-07223 BDU:2024-07229 GHSA-pmhg-5fq2-cxqq EUVD-2024-19125 EUVD-2024-37214 CVE-2024-38240 CVE-2024-38241 GHSA-pw5m-22q6-976f BDU:2024-07205 CVE-2024-38243 BDU:2024-07210 GHSA-49px-m4gc-wgg2 VVD-CISA-2024-38246 EUVD-2024-37212 BDU:2024-06874 EUVD-2024-37227 BDU:2024-07218 BDU:2024-07221 VVD-CISA-2024-38230 VVD-CISA-2024-38237 VVD-CISA-2024-38242 EUVD-2024-37216 CVE-2024-38230 VVD-CISA-2024-38263 EUVD-2024-37219 GHSA-474v-px9m-xcjx EUVD-2024-37192 CVE-2024-38233 GHSA-jq6v-vmmh-49wr EUVD-2024-37217 BDU:2024-07214 VVD-CISA-2024-38250 GHSA-2q4v-rwhp-9rxj CVE-2024-43457 CVE-2024-43467 VVD-CISA-2024-38244 GHSA-j7fx-rmf6-crmw GHSA-h59m-8f5f-h863 VVD-CISA-2024-38239 EUVD-2024-37199 VVD-CISA-2024-38240 VVD-CISA-2024-38257 EUVD-2024-40732 BDU:2024-07197 BDU:2024-07204 VVD-CISA-2024-38119 GHSA-jhm7-8qm3-8x49 BDU:2024-07195 BDU:2024-07186 BDU:2024-07216 VVD-CISA-2024-43482 EUVD-2024-37197 VVD-CISA-2024-38247 GHSA-rqjr-fpm9-pwx5 EUVD-2024-37215 GHSA-jww9-vwpc-6qmf CVE-2024-38259 GHSA-g5r8-9p9v-pqjx EUVD-2024-37208 GHSA-7c27-jcxr-97cm BDU:2024-07222 BDU:2024-07193 VVD-CISA-2024-38258 CVE-2024-38248 CVE-2024-38045 GHSA-3m4m-vgvw-3q25 BDU:2024-07859 EUVD-2024-37225 GHSA-pr5w-3qqg-c6mc EUVD-2024-37375 GHSA-rf2v-qj9w-x393 CVE-2024-38246 CVE-2024-38046 BDU:2024-07196 BDU:2024-07203 VVD-CISA-2024-38248 WID-SEC-W-2024-2121 BDU:2024-07184 VVD-CISA-2024-43457 VVD-CISA-2024-38045 GHSA-8jqv-r4vx-8fp4 BDU:2024-07215 GHSA-fj4c-4j79-r43g BDU:2024-07227 BDU:2024-06872 GHSA-fv7g-cg7m-qjrp NCSC-2024-0365 BDU:2024-07208 EUVD-2024-37204 VVD-CISA-2024-38234 BDU:2024-07201 CVE-2024-38235 CVE-2024-38253 VVD-CISA-2024-43495 BDU:2024-07067 EUVD-2024-37222 BDU:2024-07228 VVD-CISA-2024-43464 VVD-CISA-2024-38249 GHSA-mp7m-vrr7-g6gw CVE-2024-38244 CVE-2024-38232 CVE-2024-43454 EUVD-2024-40754 GHSA-rm77-w39m-fpfm EUVD-2024-40736 BDU:2024-07200 BDU:2024-07232 VVD-NCSC-2024-363 CVE-2024-21416 GHSA-m4jv-p2cx-9g8r EUVD-2024-40749 EUVD-2024-37213 GHSA-gwj7-4qx3-h44c EUVD-2024-37504 GHSA-5536-r29g-pv75 GHSA-2wg5-pqfg-hvj9 CVE-2024-38260 GHSA-8mc9-3vv7-xwf3 GHSA-4c22-xgpq-qfxw GSD-2024-21416 GHSA-587h-34w2-xgxr EUVD-2024-40727 VVD-CISA-2024-43466 EUVD-2024-37218 VVD-CISA-2024-38018 EUVD-2024-40733 CVE-2024-38254 EUVD-2024-37198 BDU:2024-07207 VVD-CISA-2024-38227 VVD-CISA-2024-38228 BDU:2024-07185 VVD-CISA-2024-43487 BDU:2024-07217 CVE-2024-38239 BDU:2024-07188 CVE-2024-38245 VVD-CISA-2024-43455 VVD-CISA-2024-38233 GHSA-296q-fx3q-6h3p EUVD-2024-37209 EUVD-2024-37200 BDU:2024-07224 EUVD-2024-40748 EUVD-2024-40730 VVD-CISA-2024-43461 VVD-CISA-2024-43491 VVD-CISA-2024-43467 CVE-2024-38119 CVE-2024-38247 EUVD-2024-37223 VVD-CISA-2024-38231 EUVD-2024-37203 GHSA-px24-vp7g-w3gw VVD-CISA-2024-38238 CVE-2024-38234 CVE-2024-38242 EUVD-2024-37228 VVD-CISA-2024-38252 GHSA-p77f-9283-wx93 GHSA-5gvh-cqjm-hff8 EUVD-2024-37196 BDU:2024-07077 VVD-CISA-2024-38253 CVE-2024-43461 GHSA-53qj-7827-7xqp BDU:2024-07198 GHSA-3j25-9c38-888w GHSA-mvx5-3q3c-pr6w GHSA-m882-rgxp-c7jh VVD-CISA-2024-38259 EUVD-2024-37201 EUVD-2024-40735 EUVD-2024-37193 VVD-CISA-2024-38256 VVD-CISA-2024-38260 GHSA-xmv4-684g-76jm GHSA-c665-2rvm-477f CVE-2024-43455 GHSA-rjw7-qg6g-6c2j VVD-CISA-2024-43463 BDU:2024-07857 CVE-2024-38217 VVD-CISA-2024-38217 EUVD-2024-37372 MSRC_CVE-2024-38226 CVE-2024-43491 CVE-2024-43458 BDU:2024-07211 VVD-CISA-2024-38232 VVD-CISA-2024-38226 CVE-2024-38263 EUVD-2024-37210 EUVD-2024-40724 CVE-2024-30073 CVE-2024-38014 EUVD-2024-37221 VVD-CISA-2024-38014 VVD-CISA-2024-38241 BDU:2024-07192 GHSA-crg8-qm9j-p9f5 CVE-2024-38249 VVD-CISA-2024-38236 BDU:2024-07220 GHSA-9wg2-mhm9-jgvc BDU:2024-07206 BDU:2024-07252 EUVD-2024-40734 CVE-2024-38237 EUVD-2024-40723 BDU:2024-07226 GHSA-wggm-rx98-f2mr GHSA-mphg-33v9-x9g5 EUVD-2024-40753 VVD-CISA-2024-43492 CVE-2024-43487 EUVD-2024-37184 VVD-CISA-2024-30073 VVD-CISA-2024-38245 GHSA-4c2x-v4q9-wm44 GHSA-g5f6-rx9g-xrpv EUVD-2024-37207 VVD-CISA-2024-43465 BDU:2024-07245 VVD-CISA-2024-21416 BDU:2024-07194 BDU:2024-07199 VVD-CISA-2024-43458 BDU:2024-07212 GHSA-3x9f-3c9h-x7gj EUVD-2024-37206 BDU:2024-07213 MSRC_CVE-2024-38250 CVE-2024-38231 GHSA-78v4-hxhf-xqqv EUVD-2024-37416 EUVD-2024-37202 GHSA-7q6v-68mf-6678 MSRC_CVE-2024-21416 VVD-CISA-2024-38235

References

advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON