EXPOSURES › CVE-2024-38226
CVE-2024-38226
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Publisher allows attackers to bypass Office macro policies by exploiting a protection mechanism failure.
This vulnerability enables attackers to bypass macro security policies in Microsoft Publisher, potentially allowing execution of malicious macros in untrusted documents. DIB organizations must ensure all Microsoft Publisher installations are patched immediately to prevent unauthorized code execution and policy circumvention.
Shame score — A security mechanism failure in a widely used Office application that allows policy bypass, though not directly linked to ransomware or supply chain compromise.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |