Microsoft OfficePlus Elevation of Privilege Vulnerability
CVE-2024-38084

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Officeplus
Vendor
CVE Published:
13 August 2024

What is CVE-2024-38084?

Microsoft OfficePlus is exposed to an elevation of privilege vulnerability that could allow an attacker to execute malicious code with elevated permissions. This issue arises from improper validation of user input, potentially enabling unauthorized actions within the application. Users are encouraged to apply relevant security updates promptly to mitigate risks associated with this vulnerability.

Affected Version(s)

Microsoft OfficePLUS Unknown 1.0 < 3.2.0.27546

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.