CVE-2024-43609: Microsoft Office Spoofing Vulnerability
Published Oct 8, 2024
·Updated
Microsoft Office Spoofing Vulnerability
Affected Software
19 affected componentsFixes available
Microsoft 365 Apps
Microsoft Office=2016
Microsoft Office=2016
Microsoft Office=2019
Microsoft Office=2019
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel=2024
Microsoft Office Long Term Servicing Channel=2024
Microsoft Office 2016<16.0.5469.1001
16.0.5469.1001
Microsoft Office 2019 for 64-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC 2021 for 64-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC 2021 for 32-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft 365 Apps for Enterprise<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft 365 Apps for Enterprise<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC 2024 for 64-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC 2024 for 32-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office 2019 for 32-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office 2016<16.0.5469.1001
16.0.5469.1001
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.5469.1001Patch KB5002635 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases
Event History
Oct 8, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-43609?
CVE-2024-43609 is classified as a spoofing vulnerability in Microsoft Office.
2
How do I fix CVE-2024-43609?
To fix CVE-2024-43609, update Microsoft Office to the latest version using available security updates.
3
Which versions of Microsoft Office are affected by CVE-2024-43609?
CVE-2024-43609 affects Microsoft Office LTSC 2024, Office 2019, Office 2021, and Office 2016 in both 32-bit and 64-bit editions.
4
What impact does CVE-2024-43609 have on users?
CVE-2024-43609 allows attackers to spoof content potentially misleading users.
5
Is there a patch available for CVE-2024-43609?
Yes, Microsoft has released security patches for CVE-2024-43609 that can be applied through update mechanisms.