Firetruck

CVE-2024-38189

KEV

Microsoft Project Remote Code Execution Vulnerability

View CVE record →
Vendor / Project
Microsoft
Product
Project
Date added
Aug 13, 2024
Due date
Sep 3, 2024
Known ransomware use
Unknown
CWEs
CWE-20

Description

Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes