CVE-2024-38189 | BDVDB-2026-245355 Detail

MicrosoftMicrosoft Office 2019

Description#

Microsoft Project Remote Code Execution Vulnerability

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.

No public exploit known

8.8 High

8.1%, Low

Estimated chance of exploitation in the next 30 days. EPSS percentile: 94.9.

Yes

Listed in the CISA Known Exploited Vulnerabilities catalog.

Improper Input Validation

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vulnerable
>= 19.0.0 and < https://aka.ms/OfficeSecurityReleases
Fixed
https://aka.ms/OfficeSecurityReleases

Not available

8.8 High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Not available

Not available

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).