Medium 6.5

Microsoft Office Spoofing Vulnerability

CVE-2024-38200 First seen on SecPulse Aug 9, 2024

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
Microsoft	MicrosoftMicrosoft Office 2019	≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases→ https://aka.ms/OfficeSecurityReleases	https://aka.ms/OfficeSecurityReleases
Microsoft	MicrosoftMicrosoft 365 Apps for Enterprise	≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases→ https://aka.ms/OfficeSecurityReleases	https://aka.ms/OfficeSecurityReleases
Microsoft	MicrosoftMicrosoft Office LTSC 2021	≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases→ https://aka.ms/OfficeSecurityReleases	https://aka.ms/OfficeSecurityReleases
Microsoft	MicrosoftMicrosoft Office 2016	≥ 16.0.0, < 16.0.5461.1001→ 16.0.5461.1001	16.0.5461.1001

References

• patch secure@microsoft.com