CVE-2024-30104: Microsoft Office Remote Code Execution Vulnerability
Published Jun 11, 2024
·Updated
Microsoft Office Remote Code Execution Vulnerability
Affected Software
18 affected componentsFixes available
Microsoft Office 2019 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office 2016
Microsoft Office 2016
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps
Microsoft 365 Apps
Microsoft Office=2016
Microsoft Office=2016
Microsoft Office=2019
Microsoft Office=2019
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office 2016<16.0.5452.1000
16.0.5452.1000
Microsoft Office 2016<16.0.5452.1000
16.0.5452.1000
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.5452.1000Patch KB5002575
Event History
Jun 11, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverity
Data Sourced
via NVD·05:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jul 10, 2024
Exploit Published
via CISA·03:55 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-30104?
CVE-2024-30104 is rated as a critical remote code execution vulnerability in Microsoft Office.
2
How do I fix CVE-2024-30104?
To fix CVE-2024-30104, install the latest security updates provided by Microsoft for the affected Office products.
3
Which Microsoft Office versions are affected by CVE-2024-30104?
CVE-2024-30104 affects Microsoft Office LTSC 2021, Office 2019, and Office 2016 across both 32-bit and 64-bit editions.
4
What types of attacks can exploit CVE-2024-30104?
CVE-2024-30104 can be exploited through specially crafted documents that execute arbitrary code when opened.
5
Is there a workaround for CVE-2024-30104 if I cannot apply updates?
Currently, the best approach is to apply the recommended security updates as there are no official workarounds.