Firetruck

CVE-2024-38189

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft 365 Apps for EnterpriseMicrosoft / Microsoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Office 2019Microsoft / Microsoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Office LTSC 2021Microsoft / Microsoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Project 2016Microsoft / Microsoft Project 2016>= 16.0.0.0, < 16.0.5461.1001affected