CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-08-13
Microsoft Project Remote Code Execution Vulnerability Advisory (CVE-2024-38189, CISA KEV Listed)
[Affected Scope] Microsoft Project 2016, LTSC Professional Plus 2021, and Microsoft 365 Apps for Enterprise
[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted Project (.mpp) file
[Mitigation] Apply the official Microsoft security updates immediately and enforce strict policies to block untrusted macro and external content execution