VDB

GCVE-VVD-NCSC-2024-396

GCVE-VVD-NCSC-2024-396
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published October 8, 2024
Microsoft heeft kwetsbaarheden verholpen in Office componenten.

Weaknesses (CWE)

CWE-284Improper Access ControlCWE-416Use After FreeCWE-357Insufficient UI Warning of Dangerous OperationsCWE-426Untrusted Search PathCWE-200Exposure of Sensitive Information to an Unauthorized Actor

Risk Scores

CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
microsoftsharepoint
microsoftmicrosoft_sharepoint_enterprise_server_2016
microsoftmicrosoft_sharepoint_server_2019
microsoftmicrosoft_sharepoint_server_subscription_edition
microsoftmicrosoft_office_ltsc_2024
microsoftmicrosoft_office_2019
microsoftmicrosoft_365_apps_for_enterprise
microsoftmicrosoft_office_ltsc_2021
microsoftmicrosoft_excel_2016
microsoftoutlook
microsoftmicrosoft_office_2016

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›