CVSS 9.8 Critical EXPLOITED Patched 2024

CVE-2024-38021

Microsoft Office remote code execution vulnerability (RCE). It is critical that malicious Office documents are used to run payloads in the DBatLoader and GuLoader campaigns.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 9.8 / 10.0

Severity Critical

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Microsoft Office 2016/2019/2021, M365

Exploitation Method Remote Code Execution

MITRE ATT&CK T1203 - Exploitation for Client Execution

CVE-2024-38021 Analizi

Microsoft Office kritik uzaktan kod calistirma acigi. Kimlik dogrulama gerektirmeksizin ozel hazirlanmis Office dokumanlarinin acilmasiyla tetikleniyor. DBatLoader kampanyalarinda genis capli kullanim gorulmustur.

Teknik Detaylar

CVSS: 9.8/10
Etkilenen: Microsoft Office 2016-2021, M365
Vektoru: Kotu amacli .doc/.xls eki

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs