CVE-2024-38189

CVE-2024-38189 is a remote code execution vulnerability in Microsoft Project. The CVE description and CNNVD/MSRC references indicate an input validation error in Microsoft Project that can allow remote code execution, with a CVSS v3.1 base score of 8.8 (HIGH) and exploitability requiring user int...

CVE-2020-1449

CVE-2020-1449 is a remote code execution vulnerability in Microsoft Project caused by failing to check the source markup of a file. Public records show affected products include at least Project 2010, 2013, and 2016 variants, with the CVSSv3 base score variably cited (NVD lists 7.8 MED-HIGH; some...