CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Publisher Security Feature Bypass Vulnerability (CVE-2024-38226) Technical Advisory
[Affected Scope] Microsoft Publisher 2016, Office LTSC 2021, and Microsoft 365 Apps within supported lifecycles
[Impact] An attacker can bypass Office macro block policies and Mark of the Web (MOTW) security warnings to execute arbitrary code when a user opens a specially crafted Publisher file
[Mitigation] Apply the official Microsoft security updates immediately and enforce Group Policies to block macros in files originating from the Internet
Microsoft Publisher Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2023-21715) Analysis & Mitigation Guide
[Affected Scope] Microsoft Office and Microsoft Publisher 2013, 2016, 2019, 2021, and Microsoft 365 Apps
[Impact] Attackers can bypass Office macro blocking policies (Mark of the Web) via specially crafted Publisher files to execute arbitrary code
[Mitigation] Apply official Microsoft security patches immediately and enforce registry policies to disable Publisher macros