Vulnerabilitycritical
Unpatched MS Office flaw may leak NTLM hashes to attackers (CVE-2024-38200)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-38200 | Microsoft Office Spoofing Vulnerability | 6.5 | 20% |
From the original article
2 min read at helpnetsecurity.com
A new MS Office zero-day vulnerability (CVE-2024-38200) can be exploited by attackers to grab users’ NTLM hashes, Microsoft has shared late last week. The vulnerability is exploitable remotely and requires no special privileges or user interaction to be triggered.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.