CVE Catalog
Actively exploited in the wild
Microsoft Publisher Protection Mechanism Failure Vulnerability
Microsoft - Publisher · Listed in the CISA KEV since 2024-09-10. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-38226
HighCVSS 7.3KEVExploitation Probability (EPSS)
High risk2.67%
84th percentile - higher than 84% of all known CVEs
Summary
Security feature bypass vulnerability in Microsoft Publisher. An attacker could exploit it to bypass security features and run unsafe content.
Risk Assessment
Risk of security bypass and potential malicious code execution.
Recommendation
Apply security updates for Microsoft Publisher.
Original NVD description (English source)
Microsoft Publisher Security Feature Bypass Vulnerability