CVE-2024-38189

Microsoft Project allows remote code execution via a malicious file, enabling attackers to compromise DIB systems.

This vulnerability allows remote code execution through a malicious file in Microsoft Project, posing a significant risk to DIB organizations using the software. The fact that it is actively exploited in the KEV list indicates it is being targeted by threat actors, necessitating immediate patching to prevent unauthorized access and data exfiltration.

Shame score — While the vulnerability is serious and actively exploited, it is a standard remote code execution flaw in a widely used application rather than a unique or negligent failure.