Exploited Vulnerabilities DailyCVE-2024-38226: Microsoft Publisher
EPSS2.6%No. 1541 of 1739 in KEV
CVE year2024listed the same year
Same vendor in KEV389
Same product1
| Field | Value |
|---|---|
| Vendor | Microsoft |
| Product | Publisher |
| Name | Microsoft Publisher Protection Mechanism Failure Vulnerability |
| Added to KEV | 2024-09-10 |
| US federal due date | 2024-10-01 |
| Ransomware use | Unknown |
| CWE | CWE-693 |
CISA description
Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Microsoft Publisher vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-09-10.