CVE-2024-49059

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Microsoft Office Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59CWE-362

Affected software

VendorProductVersions
MicrosoftMicrosoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 2016>= 16.0.0, < 16.0.5478.1004
MicrosoftMicrosoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2024>= 1.0.0, < https://aka.ms/OfficeSecurityReleases

References

Timeline

Published
Dec 12, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-49067.5A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an uCVE-2024-490608.8Azure Stack HCI Elevation of Privilege VulnerabilityCVE-2024-490626.5Microsoft SharePoint Information Disclosure VulnerabilityCVE-2024-490638.4Microsoft/Muzic Remote Code Execution VulnerabilityCVE-2024-490646.5Microsoft SharePoint Information Disclosure VulnerabilityCVE-2024-490655.5Microsoft Office Remote Code Execution VulnerabilityCVE-2024-490688.2Microsoft SharePoint Elevation of Privilege VulnerabilityCVE-2024-490697.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2024-49076.5A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability aCVE-2024-490707.4Microsoft SharePoint Remote Code Execution VulnerabilityCVE-2024-490716.5Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized aCVE-2024-490727.8Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2024-49059: High severity, CVSS 7.0 | Vulnix