First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-38200

MediumCVSS 6.5/10Last modified Nov 3, 2026

Description

Microsoft Office Spoofing Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Office 2019	>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft 365 Apps for Enterprise	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office LTSC 2021	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office 2016	>= 16.0.0, < 16.0.5461.1001

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38200Patch, Vendor Advisory

Timeline

Published: Aug 12, 2024
Last modified: Nov 3, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-382017.0Azure Stack Hub Elevation of Privilege Vulnerability CVE-2024-382027.3Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with CVE-2024-382035.5Windows Package Library Manager Information Disclosure Vulnerability CVE-2024-382046.5Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.CVE-2024-382066.5An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information CVE-2024-382076.3Microsoft Edge (HTML-based) Memory Corruption Vulnerability CVE-2024-382086.1Microsoft Edge for Android Spoofing Vulnerability CVE-2024-382097.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2024-38217.3The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to unauthorized access due CVE-2024-382107.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2024-382118.2Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability CVE-2024-382128.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-38200: Medium severity, CVSS 6.5 | Vulnix