CVE-2024-38200

—1

CVSS 3.1

6.5 medium

EPSS

20%p97

Published

Aug 12, 2024 (Aug 12, 2024)

Modified

Jun 17, 2026

Description

Microsoft Office Spoofing Vulnerability

Vendors: microsoft
Products: 365 apps, office, office long term servicing channel
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (20.3%)

In the news7 stories

Week in review: MS Office flaw may leak NTLM hashes, malicious Chrome, Edge browser extensions

Help Net SecurityAug 18, 00:00 UTC · Aug 18, 2024Ransomware in the wildCVE-2024-38200 CVE-2024-28986

60

AI, election security headline discussions at Black Hat and DEF CON

Cisco TalosAug 15, 18:00 UTC · Aug 15, 2024Ransomware in the wildCVE-2024-38184 CVE-2024-38185 CVE-2024-38186+3 CVEs1

60

Microsoft fixes 6 zero-days under active attack

Help Net SecurityAug 15, 07:12 UTC · Aug 15, 2024Exploit / PoC in the wildCVE-2024-38178 CVE-2024-38106 CVE-2024-38107+10 CVEs

60

Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2024Vulnerability in the wildCVE-2024-38189 CVE-2024-38178 CVE-2024-38193+13 CVEs1

60

Microsoft Fixes Nine Zero

Infosecurity MagazineAug 14, 09:50 UTC · Aug 14, 2024Exploit / PoC in the wildCVE-2024-38213 CVE-2024-38178 CVE-2024-38193+7 CVEs1

60

Unpatched MS Office flaw may leak NTLM hashes to attackers (CVE-2024-38200)

Help Net SecurityAug 12, 00:00 UTC · Aug 12, 2024Vulnerability CVE-2024-382001

60

Microsoft Warns of Unpatched Office Vulnerability Leading to Data Exposure

The Hacker NewsAug 10, 07:13 UTC · Aug 10, 2024Vulnerability in the wildCVE-2024-38200 CVE-2024-38202 CVE-2024-213021

60