CVE CVE

CVE-2024-38226

CISA Known Exploited Vulnerability (KEV)

Microsoft Publisher Protection Mechanism Failure Vulnerability

September 10, 2024

October 1, 2024

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Microsoft Publisher Security Feature Bypass Vulnerability

Weakness Enumeration

CWE-ID CWE Name

CWE-693
Protection Mechanism Failure

Details

Source:
NVD
Published:
Updated:

Risk information

CVSS v3

Base score:
7.3
Severity:

HIGH

Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS v2

Not defined