coldbraid

CVE-2024-38189 Microsoft Project

Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.

CVSS
not scored

CWE-20

On CISA’s exploited list

Microsoft Project Remote Code Execution Vulnerability

Added
2024-08-13
Federal patch deadline
2024-09-03
Ransomware use
not known