CVE-2024-38171: Microsoft PowerPoint Remote Code Execution Vulnerability
Published Aug 13, 2024
·Updated
Microsoft PowerPoint Remote Code Execution Vulnerability
Affected Software
14 affected componentsFixes available
Microsoft Office LTSC for Mac 2021
Microsoft Office 2019 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft PowerPoint 2016
Microsoft PowerPoint 2016
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps
Microsoft Office=2019
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel Macos=2021
Microsoft PowerPoint=2016
Remediation
Event History
Aug 13, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:30 PM
Data Sourced
via MITRE·05:30 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38171?
CVE-2024-38171 has been classified with a high severity level due to its potential for remote code execution.
2
How do I fix CVE-2024-38171?
To fix CVE-2024-38171, you should apply the security updates provided by Microsoft for the affected versions of PowerPoint and Office.
3
What products are affected by CVE-2024-38171?
CVE-2024-38171 affects multiple Microsoft products, including Microsoft 365 Apps for Enterprise, Office 2019, and PowerPoint 2016.
4
Can CVE-2024-38171 lead to data compromise?
Yes, CVE-2024-38171 can lead to data compromise as it allows an attacker to execute arbitrary code on the affected system.
5
Is there a workaround for CVE-2024-38171?
Currently, the recommended approach for CVE-2024-38171 is to apply the latest security updates from Microsoft, as no official workaround is suggested.