Microsoft Word Security Feature Bypass Vulnerability
CVE-2024-49033

7.5HIGH

Key Information:

Vendor
Microsoft
Status
Microsoft Office Ltsc For Mac 2024
Microsoft Office 2019
Microsoft 365 Apps For Enterprise
Microsoft Office Ltsc For Mac 2021
Vendor
CVE Published:
12 November 2024

Summary

A security feature bypass vulnerability exists in Microsoft Word, which allows an attacker to evade security measures in place. This vulnerability may enable attackers to execute unauthorized commands or interfere with the expected security operations of the software, potentially compromising user data and system integrity. Users are encouraged to apply the latest updates from Microsoft to mitigate any risks associated with this vulnerability.

Affected Version(s)

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office 2019 32-bit Systems 19.0.0

Microsoft Office LTSC 2021 x64-based Systems 16.0.1

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed
.