CVE-2024-38226
HIGH KEVMicrosoft Publisher - Privilege Escalation
Title source: llmDescription
Microsoft Publisher Security Feature Bypass Vulnerability
Scores
CVSS v3
7.3
EPSS
0.0143
EPSS Percentile
80.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitation Intel
CISA KEV
2024-09-10
VulnCheck KEV
2024-09-10
InTheWild.io
2024-09-10
ENISA EUVD
EUVD-2024-37192
Classification
CWE
CWE-693
Status
published
Affected Products (6)
microsoft/office_2019
microsoft/office_2019
microsoft/office_long_term_servicing_channel
microsoft/office_long_term_servicing_channel
microsoft/publisher
microsoft/publisher
Timeline
Published
Sep 10, 2024
KEV Added
Sep 10, 2024
Tracked Since
Feb 18, 2026