Microsoft Project Remote Code Execution Vulnerability

概要

参考情報

• msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38189 · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-38189

office long term servicing channel のその他の脆弱性

• CVE-2026-42832中 5.5Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-42831高 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-40421中 4.3Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally…
• CVE-2026-40420高 8.8Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
• CVE-2026-40419高 7.8Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.