Back to CVE Browser

CVE-2024-38226

🔥 Known Exploited (CISA KEV)HIGH

7.3

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-09-10

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Microsoft Publisher Security Feature Bypass Vulnerability

Affected Platforms (CPE)

📦

Microsoft

Office 2019

All versions

📦

Microsoft

Office Long Term Servicing Channel

= 2021

📦

Microsoft

Publisher

= 2016

References & Advisories

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38226

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38226

Related Security Intelligence Articles

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

Global Cyber Intel Digest: July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

Global Cyber Intel Digest: July 23, 2026

Key threat updates including CISA's KEV addition of Langflow CVE-2026-0770 remote code execution, unauthenticated path traversal in Windmill CVE-2026-29059, and ongoing incident response guidance for SonicWall SMA1000 zero-day exposures.

Related Vulnerabilities

CVE-2026-610729.9

Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft (component: Staffing). ...

CVE-2026-605937.5

Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft (component: Staffing Front Offic...

An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers ...

**UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to ...