VDB

GCVE-VVD-NCSC-2024-396

GCVE-VVD-NCSC-2024-396
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published October 8, 2024
Microsoft heeft kwetsbaarheden verholpen in Office componenten.

Weaknesses (CWE)

CWE-284Improper Access ControlCWE-416Use After FreeCWE-357Insufficient UI Warning of Dangerous OperationsCWE-426Untrusted Search PathCWE-200Exposure of Sensitive Information to an Unauthorized Actor

Risk Scores

CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
microsoftsharepoint——
microsoftmicrosoft_sharepoint_enterprise_server_2016——
microsoftmicrosoft_sharepoint_server_2019——
microsoftmicrosoft_sharepoint_server_subscription_edition——
microsoftmicrosoft_office_ltsc_2024——
microsoftmicrosoft_office_2019——
microsoftmicrosoft_365_apps_for_enterprise——
microsoftmicrosoft_office_ltsc_2021——
microsoftmicrosoft_excel_2016——
microsoftoutlook——
microsoftmicrosoft_office_2016——

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

774 records in the GCVE database · Updated October 31, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›