CVE-2024-38226

Microsoft Publisher Protection Mechanism Failure Vulnerability

Microsoft — Publisher

Added to KEV catalog: 10 September 2024
Federal remediation due date: 1 October 2024
Weakness classification (CWE): CWE-693

CISA Description

Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38226; https://nvd.nist.gov/vuln/detail/CVE-2024-38226

View on NVD View on MITRE CVE View full CISA catalog

More Microsoft Vulnerabilities

CVE-2026-45659

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

CVE-2008-4250

Microsoft Windows Buffer Overflow Vulnerability

CVE-2009-1537

Microsoft DirectX NULL Byte Overwrite Vulnerability

CVE-2010-0249

Microsoft Internet Explorer Use-After-Free Vulnerability

CVE-2010-0806

Microsoft Internet Explorer Use-After-Free Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services