Firetruck

CVE-2024-38226

KEV
Updated Aug 10, 2026 · PUBLISHED
View KEV entry →

Description

Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft Office 2019Microsoft / Microsoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Office LTSC 2021Microsoft / Microsoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Publisher 2016Microsoft / Microsoft Publisher 2016>= 16.0.0, < 16.0.5465.1001affected