Vulnerability-Lookup

CVE-2024-21384 (GCVE-0-2024-21384)

Vulnerability from cvelistv5 – Published: 2024-02-13 18:02 – Updated: 2025-05-09 18:23

Title

Microsoft Office OneNote Remote Code Execution Vulnerability

Summary

Microsoft Office OneNote Remote Code Execution Vulnerability

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-416 - Use After Free

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Microsoft	Microsoft 365 Apps for Enterprise	Affected: 16.0.1 , < https://aka.ms/OfficeSecurityReleases (custom)
Microsoft	Microsoft Office LTSC 2021	Affected: 16.0.1 , < https://aka.ms/OfficeSecurityReleases (custom)

Date Public

2024-02-13 08:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:20:40.620Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Microsoft Office OneNote Remote Code Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21384",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T18:44:33.610284Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-09T18:23:58.730Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Microsoft 365 Apps for Enterprise",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "https://aka.ms/OfficeSecurityReleases",
              "status": "affected",
              "version": "16.0.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems",
            "32-bit Systems"
          ],
          "product": "Microsoft Office LTSC 2021",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "https://aka.ms/OfficeSecurityReleases",
              "status": "affected",
              "version": "16.0.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*",
                  "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases",
                  "versionStartIncluding": "16.0.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases",
                  "versionStartIncluding": "16.0.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2024-02-13T08:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Microsoft Office OneNote Remote Code Execution Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-03T01:37:40.678Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft Office OneNote Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384"
        }
      ],
      "title": "Microsoft Office OneNote Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2024-21384",
    "datePublished": "2024-02-13T18:02:44.116Z",
    "dateReserved": "2023-12-08T22:45:20.453Z",
    "dateUpdated": "2025-05-09T18:23:58.730Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-21384",
      "date": "2026-05-27",
      "epss": "0.00525",
      "percentile": "0.67174"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*\", \"matchCriteriaId\": \"40C15EDD-98D4-4D06-BA06-21AE0F33C72D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Microsoft Office OneNote Remote Code Execution Vulnerability\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de ejecuci\\u00f3n remota de c\\u00f3digo de Microsoft Office OneNote\"}]",
      "id": "CVE-2024-21384",
      "lastModified": "2024-11-21T08:54:15.043",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"secure@microsoft.com\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 5.9}]}",
      "published": "2024-02-13T18:15:56.533",
      "references": "[{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384\", \"source\": \"secure@microsoft.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "secure@microsoft.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"secure@microsoft.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-21384\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2024-02-13T18:15:56.533\",\"lastModified\":\"2024-11-21T08:54:15.043\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Microsoft Office OneNote Remote Code Execution Vulnerability\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo de Microsoft Office OneNote\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"40C15EDD-98D4-4D06-BA06-21AE0F33C72D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384\", \"name\": \"Microsoft Office OneNote Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T22:20:40.620Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-21384\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-08T18:44:33.610284Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-08T18:44:35.386Z\"}}], \"cna\": {\"title\": \"Microsoft Office OneNote Remote Code Execution Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Microsoft 365 Apps for Enterprise\", \"versions\": [{\"status\": \"affected\", \"version\": \"16.0.1\", \"lessThan\": \"https://aka.ms/OfficeSecurityReleases\", \"versionType\": \"custom\"}], \"platforms\": [\"32-bit Systems\", \"x64-based Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Office LTSC 2021\", \"versions\": [{\"status\": \"affected\", \"version\": \"16.0.1\", \"lessThan\": \"https://aka.ms/OfficeSecurityReleases\", \"versionType\": \"custom\"}], \"platforms\": [\"x64-based Systems\", \"32-bit Systems\"]}], \"datePublic\": \"2024-02-13T08:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384\", \"name\": \"Microsoft Office OneNote Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Microsoft Office OneNote Remote Code Execution Vulnerability\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416: Use After Free\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"https://aka.ms/OfficeSecurityReleases\", \"versionStartIncluding\": \"16.0.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"https://aka.ms/OfficeSecurityReleases\", \"versionStartIncluding\": \"16.0.1\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2025-05-03T01:37:40.678Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-21384\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-09T18:23:58.730Z\", \"dateReserved\": \"2023-12-08T22:45:20.453Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2024-02-13T18:02:44.116Z\", \"assignerShortName\": \"microsoft\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2024-AVI-0127

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Microsoft Office. Elles permettent à un attaquant de provoquer une élévation de privilèges et une exécution de code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Office	Microsoft 365 Apps
Microsoft	Office	Microsoft Word 2016
Microsoft	Office	Microsoft Office LTSC 2021
Microsoft	Office	Microsoft PowerPoint 2016
Microsoft	Office	Microsoft Office 2019
Microsoft	Office	Microsoft Outlook 2016
Microsoft	Office	Microsoft Excel 2016
Microsoft	Office	Microsoft Office 2016
Microsoft	Office	Microsoft Publisher 2016

References

Title

Publication Time

CERTFR-2024-AVI-0127

Vulnerability from certfr_avis - Published: - Updated:

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Office	Microsoft 365 Apps
Microsoft	Office	Microsoft Word 2016
Microsoft	Office	Microsoft Office LTSC 2021
Microsoft	Office	Microsoft PowerPoint 2016
Microsoft	Office	Microsoft Office 2019
Microsoft	Office	Microsoft Outlook 2016
Microsoft	Office	Microsoft Excel 2016
Microsoft	Office	Microsoft Office 2016
Microsoft	Office	Microsoft Publisher 2016

References

Title

Publication Time

BDU:2024-01557

Vulnerability from fstec - Published: 13.02.2024

Title

Уязвимость пакета программ Microsoft Office, связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнить произвольный код

Description

Уязвимость пакета программ Microsoft Office связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код

Severity


                    
                      AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vendor

Microsoft Corp

Software Name

Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021

Software Version

- (Microsoft 365 Apps for Enterprise), - (Microsoft Office LTSC 2021)

Possible Mitigations

Использование рекомендаций: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384

Reference

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384 https://safe-surf.ru/upload/VULN-new/VULN.2024-02-16.1.pdf

CWE

CWE-20

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Microsoft 365 Apps for Enterprise), - (Microsoft Office LTSC 2021)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "13.02.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "26.02.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "26.02.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-01557",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-21384",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c Microsoft Office, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c Microsoft Office \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384\nhttps://safe-surf.ru/upload/VULN-new/VULN.2024-02-16.1.pdf",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CNVD-2024-42946

Vulnerability from cnvd - Published: 2024-11-05

Title

Microsoft Office OneNote远程代码执行漏洞

Description

Microsoft Office OneNote是一套用于自由形式的信息获取以及多用户协作工具。 Microsoft Office OneNote存在远程代码执行漏洞，攻击者可利用该漏洞在系统上执行任意代码。

Severity

高

Patch Name

Microsoft Office OneNote远程代码执行漏洞的补丁

Patch Description

Microsoft Office OneNote是一套用于自由形式的信息获取以及多用户协作工具。 Microsoft Office OneNote存在远程代码执行漏洞，攻击者可利用该漏洞在系统上执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-21384

Reference

http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21384

Impacted products

Name
['Microsoft 365 Apps for Enterprise', 'Microsoft Office LTSC 2021']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-21384",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-21384"
    }
  },
  "description": "Microsoft Office OneNote\u662f\u4e00\u5957\u7528\u4e8e\u81ea\u7531\u5f62\u5f0f\u7684\u4fe1\u606f\u83b7\u53d6\u4ee5\u53ca\u591a\u7528\u6237\u534f\u4f5c\u5de5\u5177\u3002\n\nMicrosoft Office OneNote\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-21384",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-42946",
  "openTime": "2024-11-05",
  "patchDescription": "Microsoft Office OneNote\u662f\u4e00\u5957\u7528\u4e8e\u81ea\u7531\u5f62\u5f0f\u7684\u4fe1\u606f\u83b7\u53d6\u4ee5\u53ca\u591a\u7528\u6237\u534f\u4f5c\u5de5\u5177\u3002\r\n\r\nMicrosoft Office OneNote\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft Office OneNote\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft 365 Apps for Enterprise",
      "Microsoft Office LTSC 2021"
    ]
  },
  "referenceLink": "http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21384",
  "serverity": "\u9ad8",
  "submitTime": "2024-02-23",
  "title": "Microsoft Office OneNote\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

FKIE_CVE-2024-21384

Vulnerability from fkie_nvd - Published: 2024-02-13 18:15 - Updated: 2024-11-21 08:54

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Microsoft Office OneNote Remote Code Execution Vulnerability

References

	URL	Tags
	secure@microsoft.com	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384	Patch, Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384	Patch, Vendor Advisory

Impacted products

	Vendor	Product	Version
	microsoft	365_apps	-
	microsoft	office_long_term_servicing_channel	2021

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
              "matchCriteriaId": "40C15EDD-98D4-4D06-BA06-21AE0F33C72D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Office OneNote Remote Code Execution Vulnerability"
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo de Microsoft Office OneNote"
    }
  ],
  "id": "CVE-2024-21384",
  "lastModified": "2024-11-21T08:54:15.043",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-02-13T18:15:56.533",
  "references": [
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ],
      "source": "secure@microsoft.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-44VV-2MPG-8HV5

Vulnerability from github – Published: 2024-02-13 18:38 – Updated: 2024-02-13 18:38

Details

Microsoft Office OneNote Remote Code Execution Vulnerability

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-21384"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-416"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-02-13T18:15:56Z",
    "severity": "HIGH"
  },
  "details": "Microsoft Office OneNote Remote Code Execution Vulnerability",
  "id": "GHSA-44vv-2mpg-8hv5",
  "modified": "2024-02-13T18:38:24Z",
  "published": "2024-02-13T18:38:24Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21384"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2024-21384

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Microsoft Office OneNote Remote Code Execution Vulnerability

Aliases

CVE-2024-21384

Aliases

CVE-2024-21384

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2024-21384",
    "id": "GSD-2024-21384"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-21384"
      ],
      "details": "Microsoft Office OneNote Remote Code Execution Vulnerability",
      "id": "GSD-2024-21384",
      "modified": "2023-12-13T01:21:42.694820Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2024-21384",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Microsoft 365 Apps for Enterprise",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.0.1",
                          "version_value": "https://aka.ms/OfficeSecurityReleases"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Office LTSC 2021",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.0.1",
                          "version_value": "https://aka.ms/OfficeSecurityReleases"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Microsoft Office OneNote Remote Code Execution Vulnerability"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-416",
                "lang": "eng",
                "value": "CWE-416: Use After Free"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384",
            "refsource": "MISC",
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
                    "matchCriteriaId": "40C15EDD-98D4-4D06-BA06-21AE0F33C72D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "Microsoft Office OneNote Remote Code Execution Vulnerability"
          },
          {
            "lang": "es",
            "value": "Vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo de Microsoft Office OneNote"
          }
        ],
        "id": "CVE-2024-21384",
        "lastModified": "2024-04-11T20:15:27.820",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "secure@microsoft.com",
              "type": "Primary"
            }
          ]
        },
        "published": "2024-02-13T18:15:56.533",
        "references": [
          {
            "source": "secure@microsoft.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384"
          }
        ],
        "sourceIdentifier": "secure@microsoft.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "secure@microsoft.com",
            "type": "Secondary"
          }
        ]
      }
    }
  }
}

MSRC_CVE-2024-21384

Vulnerability from csaf_microsoft - Published: 2024-02-13 08:00 - Updated: 2024-02-13 08:00

Summary

Microsoft Office OneNote Remote Code Execution Vulnerability

Severity

Important

Notes

Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.

CVE-2024-21384

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Fixed 4 products

Product	Identifier	Version	Remediation
Microsoft 365 Apps for Enterprise for 32-bit Systems https://aka.ms/OfficeSecurityReleases Microsoft 365 Apps for Enterprise for 32-bit Systems		https://aka.ms/OfficeSecurityReleases
Microsoft 365 Apps for Enterprise for 64-bit Systems https://aka.ms/OfficeSecurityReleases Microsoft 365 Apps for Enterprise for 64-bit Systems		https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC 2021 for 64-bit editions https://aka.ms/OfficeSecurityReleases Microsoft Office LTSC 2021 for 64-bit editions		https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC 2021 for 32-bit editions https://aka.ms/OfficeSecurityReleases Microsoft Office LTSC 2021 for 32-bit editions		https://aka.ms/OfficeSecurityReleases

Known affected 4 products

Product	Version	Remediation
Microsoft Office LTSC 2021 for 32-bit editions <https://aka.ms/OfficeSecurityReleases Microsoft Office LTSC 2021 for 32-bit editions	<https://aka.ms/OfficeSecurityReleases	Vendor Fix fix
Microsoft Office LTSC 2021 for 64-bit editions <https://aka.ms/OfficeSecurityReleases Microsoft Office LTSC 2021 for 64-bit editions	<https://aka.ms/OfficeSecurityReleases	Vendor Fix fix
Microsoft 365 Apps for Enterprise for 64-bit Systems <https://aka.ms/OfficeSecurityReleases Microsoft 365 Apps for Enterprise for 64-bit Systems	<https://aka.ms/OfficeSecurityReleases	Vendor Fix fix
Microsoft 365 Apps for Enterprise for 32-bit Systems <https://aka.ms/OfficeSecurityReleases Microsoft 365 Apps for Enterprise for 32-bit Systems	<https://aka.ms/OfficeSecurityReleases	Vendor Fix fix

Threats

Impact Remote Code Execution

Exploit Status Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely

References

7 references

URL	Category
https://msrc.microsoft.com/update-guide/vulnerabi…	self
https://msrc.microsoft.com/csaf/advisories/2024/m…	self
https://www.microsoft.com/en-us/msrc/exploitabili…	external
https://support.microsoft.com/lifecycle	external
https://www.first.org/cvss	external
https://msrc.microsoft.com/update-guide/vulnerabi…	self
https://msrc.microsoft.com/csaf/advisories/2024/m…	self

Acknowledgments

<a href="https://twitter.com/edwardzpeng">wh1tc & Zhiniang Peng</a>

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "\u003ca href=\"https://twitter.com/edwardzpeng\"\u003ewh1tc \u0026amp; Zhiniang Peng\u003c/a\u003e"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2024-21384 Microsoft Office OneNote Remote Code Execution Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384"
      },
      {
        "category": "self",
        "summary": "CVE-2024-21384 Microsoft Office OneNote Remote Code Execution Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-21384.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Microsoft Office OneNote Remote Code Execution Vulnerability",
    "tracking": {
      "current_release_date": "2024-02-13T08:00:00.000Z",
      "generator": {
        "date": "2025-05-03T01:36:59.825Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2024-21384",
      "initial_release_date": "2024-02-13T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-02-13T08:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003chttps://aka.ms/OfficeSecurityReleases",
            "product": {
              "name": "Microsoft 365 Apps for Enterprise for 32-bit Systems \u003chttps://aka.ms/OfficeSecurityReleases",
              "product_id": "4"
            }
          },
          {
            "category": "product_version",
            "name": "https://aka.ms/OfficeSecurityReleases",
            "product": {
              "name": "Microsoft 365 Apps for Enterprise for 32-bit Systems https://aka.ms/OfficeSecurityReleases",
              "product_id": "11762"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft 365 Apps for Enterprise for 32-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003chttps://aka.ms/OfficeSecurityReleases",
            "product": {
              "name": "Microsoft 365 Apps for Enterprise for 64-bit Systems \u003chttps://aka.ms/OfficeSecurityReleases",
              "product_id": "3"
            }
          },
          {
            "category": "product_version",
            "name": "https://aka.ms/OfficeSecurityReleases",
            "product": {
              "name": "Microsoft 365 Apps for Enterprise for 64-bit Systems https://aka.ms/OfficeSecurityReleases",
              "product_id": "11763"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft 365 Apps for Enterprise for 64-bit Systems"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003chttps://aka.ms/OfficeSecurityReleases",
            "product": {
              "name": "Microsoft Office LTSC 2021 for 64-bit editions \u003chttps://aka.ms/OfficeSecurityReleases",
              "product_id": "2"
            }
          },
          {
            "category": "product_version",
            "name": "https://aka.ms/OfficeSecurityReleases",
            "product": {
              "name": "Microsoft Office LTSC 2021 for 64-bit editions https://aka.ms/OfficeSecurityReleases",
              "product_id": "11952"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Office LTSC 2021 for 64-bit editions"
      },
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003chttps://aka.ms/OfficeSecurityReleases",
            "product": {
              "name": "Microsoft Office LTSC 2021 for 32-bit editions \u003chttps://aka.ms/OfficeSecurityReleases",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "https://aka.ms/OfficeSecurityReleases",
            "product": {
              "name": "Microsoft Office LTSC 2021 for 32-bit editions https://aka.ms/OfficeSecurityReleases",
              "product_id": "11953"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Office LTSC 2021 for 32-bit editions"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-21384",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.\nFor example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.",
          "title": "According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?"
        },
        {
          "category": "faq",
          "text": "An attacker who successfully exploited this vulnerability could gain high privileges, which include read, write, and delete functionality.",
          "title": "According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?"
        }
      ],
      "product_status": {
        "fixed": [
          "11762",
          "11763",
          "11952",
          "11953"
        ],
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21384 Microsoft Office OneNote Remote Code Execution Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21384"
        },
        {
          "category": "self",
          "summary": "CVE-2024-21384 Microsoft Office OneNote Remote Code Execution Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-21384.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-02-13T08:00:00.000Z",
          "details": "https://aka.ms/OfficeSecurityReleases:Security Update:https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates",
          "product_ids": [
            "4",
            "3",
            "2",
            "1"
          ],
          "url": "https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 6.8,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Remote Code Execution"
        },
        {
          "category": "exploit_status",
          "details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"
        }
      ],
      "title": "Microsoft Office OneNote Remote Code Execution Vulnerability"
    }
  ]
}

WID-SEC-W-2024-0389

Vulnerability from csaf_certbund - Published: 2024-02-13 23:00 - Updated: 2025-02-06 23:00

Summary

Microsoft Office: Mehrere Schwachstellen

Severity

Kritisch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Die Microsoft Office Suite beinhaltet zahlreiche Büroanwendungen wie Textverarbeitung, Tabellenkalkulation, Datenbank und weitere Applikationen.

Angriff: Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Office Anwendungen ausnutzen, um beliebigen Code auszuführen, seine Privilegien zu eskalieren oder vertrauliche Informationen offenzulegen.

Betroffene Betriebssysteme: - Windows

CVE-2024-20673

Es bestehen mehrere Schwachstellen in Microsoft Office. Diese Fehler bestehen unter anderem in Microsoft Excel 2016, Microsoft Outlook 2016 oder Microsoft PowerPoint 2016. Diese Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, seine Berechtigungen zu erweitern oder vertrauliche Informationen, wie z.B. NTLM Hashes offenzulegen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion, um sie erfolgreich auszunutzen.

Affected products

Known affected 14 products

Product	Identifier	Version
Microsoft Office 2016 Microsoft	`cpe:/a:microsoft:office_2016:-`	—
Microsoft Skype for Business Server 2019 CU7 Microsoft / Skype	`cpe:/a:microsoft:skype:for_business_server_2019_cu7`	for Business Server 2019 CU7
Microsoft Office 2019 Microsoft	`cpe:/a:microsoft:office_2019:-`	—
Microsoft Outlook 2016 Microsoft	`cpe:/a:microsoft:outlook_2016:-`	—
Microsoft 365 Apps Microsoft	`cpe:/a:microsoft:365_apps:-`	—
Microsoft Office LTSC 2021 Microsoft / Office	`cpe:/a:microsoft:office:ltsc_2021`	LTSC 2021
Microsoft Word 2016 Microsoft	`cpe:/a:microsoft:word_2016:-`	—
Microsoft Publisher 2016 Microsoft	`cpe:/a:microsoft:publisher_2016:-`	—
Microsoft PowerPoint 2016 Microsoft	`cpe:/a:microsoft:powerpoint_2016:-`	—
Microsoft Visio 2016 Microsoft	`cpe:/a:microsoft:visio_2016:-`	—
Microsoft Teams for Android Microsoft / Teams	`cpe:/a:microsoft:teams:for_android`	for Android
Microsoft Skype for Business 2016 (32-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2832-bit%29`	(32-bit)
Microsoft Skype for Business 2016 (64-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2864-bit%29`	(64-bit)
Microsoft Excel 2016 Microsoft	`cpe:/a:microsoft:excel_2016:-`	—

CVE-2024-20695

Affected products

Known affected 14 products

Product	Identifier	Version
Microsoft Office 2016 Microsoft	`cpe:/a:microsoft:office_2016:-`	—
Microsoft Skype for Business Server 2019 CU7 Microsoft / Skype	`cpe:/a:microsoft:skype:for_business_server_2019_cu7`	for Business Server 2019 CU7
Microsoft Office 2019 Microsoft	`cpe:/a:microsoft:office_2019:-`	—
Microsoft Outlook 2016 Microsoft	`cpe:/a:microsoft:outlook_2016:-`	—
Microsoft 365 Apps Microsoft	`cpe:/a:microsoft:365_apps:-`	—
Microsoft Office LTSC 2021 Microsoft / Office	`cpe:/a:microsoft:office:ltsc_2021`	LTSC 2021
Microsoft Word 2016 Microsoft	`cpe:/a:microsoft:word_2016:-`	—
Microsoft Publisher 2016 Microsoft	`cpe:/a:microsoft:publisher_2016:-`	—
Microsoft PowerPoint 2016 Microsoft	`cpe:/a:microsoft:powerpoint_2016:-`	—
Microsoft Visio 2016 Microsoft	`cpe:/a:microsoft:visio_2016:-`	—
Microsoft Teams for Android Microsoft / Teams	`cpe:/a:microsoft:teams:for_android`	for Android
Microsoft Skype for Business 2016 (32-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2832-bit%29`	(32-bit)
Microsoft Skype for Business 2016 (64-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2864-bit%29`	(64-bit)
Microsoft Excel 2016 Microsoft	`cpe:/a:microsoft:excel_2016:-`	—

CVE-2024-21374

Affected products

Known affected 14 products

Product	Identifier	Version
Microsoft Office 2016 Microsoft	`cpe:/a:microsoft:office_2016:-`	—
Microsoft Skype for Business Server 2019 CU7 Microsoft / Skype	`cpe:/a:microsoft:skype:for_business_server_2019_cu7`	for Business Server 2019 CU7
Microsoft Office 2019 Microsoft	`cpe:/a:microsoft:office_2019:-`	—
Microsoft Outlook 2016 Microsoft	`cpe:/a:microsoft:outlook_2016:-`	—
Microsoft 365 Apps Microsoft	`cpe:/a:microsoft:365_apps:-`	—
Microsoft Office LTSC 2021 Microsoft / Office	`cpe:/a:microsoft:office:ltsc_2021`	LTSC 2021
Microsoft Word 2016 Microsoft	`cpe:/a:microsoft:word_2016:-`	—
Microsoft Publisher 2016 Microsoft	`cpe:/a:microsoft:publisher_2016:-`	—
Microsoft PowerPoint 2016 Microsoft	`cpe:/a:microsoft:powerpoint_2016:-`	—
Microsoft Visio 2016 Microsoft	`cpe:/a:microsoft:visio_2016:-`	—
Microsoft Teams for Android Microsoft / Teams	`cpe:/a:microsoft:teams:for_android`	for Android
Microsoft Skype for Business 2016 (32-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2832-bit%29`	(32-bit)
Microsoft Skype for Business 2016 (64-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2864-bit%29`	(64-bit)
Microsoft Excel 2016 Microsoft	`cpe:/a:microsoft:excel_2016:-`	—

CVE-2024-21378

Affected products

Known affected 14 products

Product	Identifier	Version
Microsoft Office 2016 Microsoft	`cpe:/a:microsoft:office_2016:-`	—
Microsoft Skype for Business Server 2019 CU7 Microsoft / Skype	`cpe:/a:microsoft:skype:for_business_server_2019_cu7`	for Business Server 2019 CU7
Microsoft Office 2019 Microsoft	`cpe:/a:microsoft:office_2019:-`	—
Microsoft Outlook 2016 Microsoft	`cpe:/a:microsoft:outlook_2016:-`	—
Microsoft 365 Apps Microsoft	`cpe:/a:microsoft:365_apps:-`	—
Microsoft Office LTSC 2021 Microsoft / Office	`cpe:/a:microsoft:office:ltsc_2021`	LTSC 2021
Microsoft Word 2016 Microsoft	`cpe:/a:microsoft:word_2016:-`	—
Microsoft Publisher 2016 Microsoft	`cpe:/a:microsoft:publisher_2016:-`	—
Microsoft PowerPoint 2016 Microsoft	`cpe:/a:microsoft:powerpoint_2016:-`	—
Microsoft Visio 2016 Microsoft	`cpe:/a:microsoft:visio_2016:-`	—
Microsoft Teams for Android Microsoft / Teams	`cpe:/a:microsoft:teams:for_android`	for Android
Microsoft Skype for Business 2016 (32-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2832-bit%29`	(32-bit)
Microsoft Skype for Business 2016 (64-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2864-bit%29`	(64-bit)
Microsoft Excel 2016 Microsoft	`cpe:/a:microsoft:excel_2016:-`	—

CVE-2024-21379

Affected products

Known affected 14 products

Product	Identifier	Version
Microsoft Office 2016 Microsoft	`cpe:/a:microsoft:office_2016:-`	—
Microsoft Skype for Business Server 2019 CU7 Microsoft / Skype	`cpe:/a:microsoft:skype:for_business_server_2019_cu7`	for Business Server 2019 CU7
Microsoft Office 2019 Microsoft	`cpe:/a:microsoft:office_2019:-`	—
Microsoft Outlook 2016 Microsoft	`cpe:/a:microsoft:outlook_2016:-`	—
Microsoft 365 Apps Microsoft	`cpe:/a:microsoft:365_apps:-`	—
Microsoft Office LTSC 2021 Microsoft / Office	`cpe:/a:microsoft:office:ltsc_2021`	LTSC 2021
Microsoft Word 2016 Microsoft	`cpe:/a:microsoft:word_2016:-`	—
Microsoft Publisher 2016 Microsoft	`cpe:/a:microsoft:publisher_2016:-`	—
Microsoft PowerPoint 2016 Microsoft	`cpe:/a:microsoft:powerpoint_2016:-`	—
Microsoft Visio 2016 Microsoft	`cpe:/a:microsoft:visio_2016:-`	—
Microsoft Teams for Android Microsoft / Teams	`cpe:/a:microsoft:teams:for_android`	for Android
Microsoft Skype for Business 2016 (32-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2832-bit%29`	(32-bit)
Microsoft Skype for Business 2016 (64-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2864-bit%29`	(64-bit)
Microsoft Excel 2016 Microsoft	`cpe:/a:microsoft:excel_2016:-`	—

CVE-2024-21384

Affected products

Known affected 14 products

Product	Identifier	Version
Microsoft Office 2016 Microsoft	`cpe:/a:microsoft:office_2016:-`	—
Microsoft Skype for Business Server 2019 CU7 Microsoft / Skype	`cpe:/a:microsoft:skype:for_business_server_2019_cu7`	for Business Server 2019 CU7
Microsoft Office 2019 Microsoft	`cpe:/a:microsoft:office_2019:-`	—
Microsoft Outlook 2016 Microsoft	`cpe:/a:microsoft:outlook_2016:-`	—
Microsoft 365 Apps Microsoft	`cpe:/a:microsoft:365_apps:-`	—
Microsoft Office LTSC 2021 Microsoft / Office	`cpe:/a:microsoft:office:ltsc_2021`	LTSC 2021
Microsoft Word 2016 Microsoft	`cpe:/a:microsoft:word_2016:-`	—
Microsoft Publisher 2016 Microsoft	`cpe:/a:microsoft:publisher_2016:-`	—
Microsoft PowerPoint 2016 Microsoft	`cpe:/a:microsoft:powerpoint_2016:-`	—
Microsoft Visio 2016 Microsoft	`cpe:/a:microsoft:visio_2016:-`	—
Microsoft Teams for Android Microsoft / Teams	`cpe:/a:microsoft:teams:for_android`	for Android
Microsoft Skype for Business 2016 (32-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2832-bit%29`	(32-bit)
Microsoft Skype for Business 2016 (64-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2864-bit%29`	(64-bit)
Microsoft Excel 2016 Microsoft	`cpe:/a:microsoft:excel_2016:-`	—

CVE-2024-21402

Affected products

Known affected 14 products

Product	Identifier	Version
Microsoft Office 2016 Microsoft	`cpe:/a:microsoft:office_2016:-`	—
Microsoft Skype for Business Server 2019 CU7 Microsoft / Skype	`cpe:/a:microsoft:skype:for_business_server_2019_cu7`	for Business Server 2019 CU7
Microsoft Office 2019 Microsoft	`cpe:/a:microsoft:office_2019:-`	—
Microsoft Outlook 2016 Microsoft	`cpe:/a:microsoft:outlook_2016:-`	—
Microsoft 365 Apps Microsoft	`cpe:/a:microsoft:365_apps:-`	—
Microsoft Office LTSC 2021 Microsoft / Office	`cpe:/a:microsoft:office:ltsc_2021`	LTSC 2021
Microsoft Word 2016 Microsoft	`cpe:/a:microsoft:word_2016:-`	—
Microsoft Publisher 2016 Microsoft	`cpe:/a:microsoft:publisher_2016:-`	—
Microsoft PowerPoint 2016 Microsoft	`cpe:/a:microsoft:powerpoint_2016:-`	—
Microsoft Visio 2016 Microsoft	`cpe:/a:microsoft:visio_2016:-`	—
Microsoft Teams for Android Microsoft / Teams	`cpe:/a:microsoft:teams:for_android`	for Android
Microsoft Skype for Business 2016 (32-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2832-bit%29`	(32-bit)
Microsoft Skype for Business 2016 (64-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2864-bit%29`	(64-bit)
Microsoft Excel 2016 Microsoft	`cpe:/a:microsoft:excel_2016:-`	—

CVE-2024-21413

Affected products

Known affected 14 products

Product	Identifier	Version
Microsoft Office 2016 Microsoft	`cpe:/a:microsoft:office_2016:-`	—
Microsoft Skype for Business Server 2019 CU7 Microsoft / Skype	`cpe:/a:microsoft:skype:for_business_server_2019_cu7`	for Business Server 2019 CU7
Microsoft Office 2019 Microsoft	`cpe:/a:microsoft:office_2019:-`	—
Microsoft Outlook 2016 Microsoft	`cpe:/a:microsoft:outlook_2016:-`	—
Microsoft 365 Apps Microsoft	`cpe:/a:microsoft:365_apps:-`	—
Microsoft Office LTSC 2021 Microsoft / Office	`cpe:/a:microsoft:office:ltsc_2021`	LTSC 2021
Microsoft Word 2016 Microsoft	`cpe:/a:microsoft:word_2016:-`	—
Microsoft Publisher 2016 Microsoft	`cpe:/a:microsoft:publisher_2016:-`	—
Microsoft PowerPoint 2016 Microsoft	`cpe:/a:microsoft:powerpoint_2016:-`	—
Microsoft Visio 2016 Microsoft	`cpe:/a:microsoft:visio_2016:-`	—
Microsoft Teams for Android Microsoft / Teams	`cpe:/a:microsoft:teams:for_android`	for Android
Microsoft Skype for Business 2016 (32-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2832-bit%29`	(32-bit)
Microsoft Skype for Business 2016 (64-bit) Microsoft / Skype for Business 2016	`cpe:/a:microsoft:skype_for_business_2016:%2864-bit%29`	(64-bit)
Microsoft Excel 2016 Microsoft	`cpe:/a:microsoft:excel_2016:-`	—

References

5 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://msrc.microsoft.com/update-guide	external
https://research.checkpoint.com/2024/the-risks-of…	external
https://www.bleepingcomputer.com/news/security/cr…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "kritisch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Die Microsoft Office Suite beinhaltet zahlreiche B\u00fcroanwendungen wie Textverarbeitung, Tabellenkalkulation, Datenbank und weitere Applikationen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Office Anwendungen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Privilegien zu eskalieren oder vertrauliche Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-0389 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0389.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-0389 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0389"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates vom 2024-02-13",
        "url": "https://msrc.microsoft.com/update-guide"
      },
      {
        "category": "external",
        "summary": "CheckPoint Publication vom 2024-02-14",
        "url": "https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/"
      },
      {
        "category": "external",
        "summary": "BleepingComputer vom 2025-02-06",
        "url": "https://www.bleepingcomputer.com/news/security/critical-rce-bug-in-microsoft-outlook-now-exploited-in-attacks/"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft Office: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-02-06T23:00:00.000+00:00",
      "generator": {
        "date": "2025-02-07T09:06:03.555+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.10"
        }
      },
      "id": "WID-SEC-W-2024-0389",
      "initial_release_date": "2024-02-13T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-02-13T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-02-14T23:00:00.000+00:00",
          "number": "2",
          "summary": "Exploit aufgenommen"
        },
        {
          "date": "2025-02-06T23:00:00.000+00:00",
          "number": "3",
          "summary": "Aktive Ausnutzung gemeldet"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Microsoft 365 Apps",
            "product": {
              "name": "Microsoft 365 Apps",
              "product_id": "T032744",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:365_apps:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft Excel 2016",
            "product": {
              "name": "Microsoft Excel 2016",
              "product_id": "T013928",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:excel_2016:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "LTSC 2021",
                "product": {
                  "name": "Microsoft Office LTSC 2021",
                  "product_id": "T032745",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:office:ltsc_2021"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Office"
          },
          {
            "category": "product_name",
            "name": "Microsoft Office 2016",
            "product": {
              "name": "Microsoft Office 2016",
              "product_id": "T013923",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:office_2016:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft Office 2019",
            "product": {
              "name": "Microsoft Office 2019",
              "product_id": "T032746",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:office_2019:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft Outlook 2016",
            "product": {
              "name": "Microsoft Outlook 2016",
              "product_id": "T032747",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:outlook_2016:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft PowerPoint 2016",
            "product": {
              "name": "Microsoft PowerPoint 2016",
              "product_id": "T015483",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:powerpoint_2016:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft Publisher 2016",
            "product": {
              "name": "Microsoft Publisher 2016",
              "product_id": "T016268",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:publisher_2016:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "for Business Server 2019 CU7",
                "product": {
                  "name": "Microsoft Skype for Business Server 2019 CU7",
                  "product_id": "T030377",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:skype:for_business_server_2019_cu7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Skype"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "(32-bit)",
                "product": {
                  "name": "Microsoft Skype for Business 2016 (32-bit)",
                  "product_id": "T032748",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:skype_for_business_2016:%2832-bit%29"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "(64-bit)",
                "product": {
                  "name": "Microsoft Skype for Business 2016 (64-bit)",
                  "product_id": "T032749",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:skype_for_business_2016:%2864-bit%29"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Skype for Business 2016"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "for Android",
                "product": {
                  "name": "Microsoft Teams for Android",
                  "product_id": "T022029",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:teams:for_android"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Teams"
          },
          {
            "category": "product_name",
            "name": "Microsoft Visio 2016",
            "product": {
              "name": "Microsoft Visio 2016",
              "product_id": "T016271",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:visio_2016:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Microsoft Word 2016",
            "product": {
              "name": "Microsoft Word 2016",
              "product_id": "T015487",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:word_2016:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-20673",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Microsoft Office. Diese Fehler bestehen unter anderem in Microsoft Excel 2016, Microsoft Outlook 2016 oder Microsoft PowerPoint 2016. Diese Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Berechtigungen zu erweitern oder vertrauliche Informationen, wie z.B. NTLM Hashes offenzulegen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion, um sie erfolgreich auszunutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T013923",
          "T030377",
          "T032746",
          "T032747",
          "T032744",
          "T032745",
          "T015487",
          "T016268",
          "T015483",
          "T016271",
          "T022029",
          "T032748",
          "T032749",
          "T013928"
        ]
      },
      "release_date": "2024-02-13T23:00:00.000+00:00",
      "title": "CVE-2024-20673"
    },
    {
      "cve": "CVE-2024-20695",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Microsoft Office. Diese Fehler bestehen unter anderem in Microsoft Excel 2016, Microsoft Outlook 2016 oder Microsoft PowerPoint 2016. Diese Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Berechtigungen zu erweitern oder vertrauliche Informationen, wie z.B. NTLM Hashes offenzulegen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion, um sie erfolgreich auszunutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T013923",
          "T030377",
          "T032746",
          "T032747",
          "T032744",
          "T032745",
          "T015487",
          "T016268",
          "T015483",
          "T016271",
          "T022029",
          "T032748",
          "T032749",
          "T013928"
        ]
      },
      "release_date": "2024-02-13T23:00:00.000+00:00",
      "title": "CVE-2024-20695"
    },
    {
      "cve": "CVE-2024-21374",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Microsoft Office. Diese Fehler bestehen unter anderem in Microsoft Excel 2016, Microsoft Outlook 2016 oder Microsoft PowerPoint 2016. Diese Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Berechtigungen zu erweitern oder vertrauliche Informationen, wie z.B. NTLM Hashes offenzulegen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion, um sie erfolgreich auszunutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T013923",
          "T030377",
          "T032746",
          "T032747",
          "T032744",
          "T032745",
          "T015487",
          "T016268",
          "T015483",
          "T016271",
          "T022029",
          "T032748",
          "T032749",
          "T013928"
        ]
      },
      "release_date": "2024-02-13T23:00:00.000+00:00",
      "title": "CVE-2024-21374"
    },
    {
      "cve": "CVE-2024-21378",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Microsoft Office. Diese Fehler bestehen unter anderem in Microsoft Excel 2016, Microsoft Outlook 2016 oder Microsoft PowerPoint 2016. Diese Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Berechtigungen zu erweitern oder vertrauliche Informationen, wie z.B. NTLM Hashes offenzulegen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion, um sie erfolgreich auszunutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T013923",
          "T030377",
          "T032746",
          "T032747",
          "T032744",
          "T032745",
          "T015487",
          "T016268",
          "T015483",
          "T016271",
          "T022029",
          "T032748",
          "T032749",
          "T013928"
        ]
      },
      "release_date": "2024-02-13T23:00:00.000+00:00",
      "title": "CVE-2024-21378"
    },
    {
      "cve": "CVE-2024-21379",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Microsoft Office. Diese Fehler bestehen unter anderem in Microsoft Excel 2016, Microsoft Outlook 2016 oder Microsoft PowerPoint 2016. Diese Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Berechtigungen zu erweitern oder vertrauliche Informationen, wie z.B. NTLM Hashes offenzulegen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion, um sie erfolgreich auszunutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T013923",
          "T030377",
          "T032746",
          "T032747",
          "T032744",
          "T032745",
          "T015487",
          "T016268",
          "T015483",
          "T016271",
          "T022029",
          "T032748",
          "T032749",
          "T013928"
        ]
      },
      "release_date": "2024-02-13T23:00:00.000+00:00",
      "title": "CVE-2024-21379"
    },
    {
      "cve": "CVE-2024-21384",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Microsoft Office. Diese Fehler bestehen unter anderem in Microsoft Excel 2016, Microsoft Outlook 2016 oder Microsoft PowerPoint 2016. Diese Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Berechtigungen zu erweitern oder vertrauliche Informationen, wie z.B. NTLM Hashes offenzulegen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion, um sie erfolgreich auszunutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T013923",
          "T030377",
          "T032746",
          "T032747",
          "T032744",
          "T032745",
          "T015487",
          "T016268",
          "T015483",
          "T016271",
          "T022029",
          "T032748",
          "T032749",
          "T013928"
        ]
      },
      "release_date": "2024-02-13T23:00:00.000+00:00",
      "title": "CVE-2024-21384"
    },
    {
      "cve": "CVE-2024-21402",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Microsoft Office. Diese Fehler bestehen unter anderem in Microsoft Excel 2016, Microsoft Outlook 2016 oder Microsoft PowerPoint 2016. Diese Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Berechtigungen zu erweitern oder vertrauliche Informationen, wie z.B. NTLM Hashes offenzulegen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion, um sie erfolgreich auszunutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T013923",
          "T030377",
          "T032746",
          "T032747",
          "T032744",
          "T032745",
          "T015487",
          "T016268",
          "T015483",
          "T016271",
          "T022029",
          "T032748",
          "T032749",
          "T013928"
        ]
      },
      "release_date": "2024-02-13T23:00:00.000+00:00",
      "title": "CVE-2024-21402"
    },
    {
      "cve": "CVE-2024-21413",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Microsoft Office. Diese Fehler bestehen unter anderem in Microsoft Excel 2016, Microsoft Outlook 2016 oder Microsoft PowerPoint 2016. Diese Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, seine Berechtigungen zu erweitern oder vertrauliche Informationen, wie z.B. NTLM Hashes offenzulegen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion, um sie erfolgreich auszunutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T013923",
          "T030377",
          "T032746",
          "T032747",
          "T032744",
          "T032745",
          "T015487",
          "T016268",
          "T015483",
          "T016271",
          "T022029",
          "T032748",
          "T032749",
          "T013928"
        ]
      },
      "release_date": "2024-02-13T23:00:00.000+00:00",
      "title": "CVE-2024-21413"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-21384 (GCVE-0-2024-21384)

Solution

Solution

Tags

Sightings

Nomenclature