CyberSec.Space Logo
Back to CVE Browser

CVE-2024-38189

🔥 Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-08-13
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Microsoft Project Remote Code Execution Vulnerability

Affected Platforms (CPE)

📦
Microsoft

365 Apps

All versions
📦
Microsoft

Office 2019

All versions
📦
Microsoft

Office Long Term Servicing Channel

= 2021
📦
Microsoft

Project 2016

< 16.0.5461.1001

References & Advisories

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38189
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38189

Related Security Intelligence Articles

Global Cyber Intel Digest: July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

2026-07-24

Global Cyber Intel Digest: July 23, 2026

Key threat updates including CISA's KEV addition of Langflow CVE-2026-0770 remote code execution, unauthenticated path traversal in Windmill CVE-2026-29059, and ongoing incident response guidance for SonicWall SMA1000 zero-day exposures.

2026-07-23

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

2026-07-27

Related Vulnerabilities

CVE-2026-5863010.0

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-630807.1

Aptabase through commit 5a89368 contains a SQL injection vulnerability in the ClickHouse query backend that allows authenticated a...

CVE-2026-535944.9

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's `Manage -> Logs -> App Logs` featur...

CVE-2026-425667.5

Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.long_name...