Lucene search

K
nvd[email protected]NVD:CVE-2024-38226
HistorySep 10, 2024 - 5:15 p.m.

CVE-2024-38226

2024-09-1017:15:25
CWE-693
web.nvd.nist.gov
8
microsoft publisher
security feature bypass
vulnerability

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

20.8%

Microsoft Publisher Security Feature Bypass Vulnerability

Affected configurations

Nvd
Node
microsoftofficeMatch2019x64
OR
microsoftofficeMatch2019x86
OR
microsoftofficeMatch2021ltscx64
OR
microsoftofficeMatch2021ltscx86
OR
microsoftpublisherMatch2016x64
OR
microsoftpublisherMatch2016x86
VendorProductVersionCPE
microsoftoffice2019cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*
microsoftoffice2019cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*
microsoftoffice2021cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x64:*
microsoftoffice2021cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x86:*
microsoftpublisher2016cpe:2.3:a:microsoft:publisher:2016:*:*:*:*:*:x64:*
microsoftpublisher2016cpe:2.3:a:microsoft:publisher:2016:*:*:*:*:*:x86:*

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

20.8%