CVE-2024-38226CISA KEVEPSS p85.3%

CVE-2024-38226Microsoft Publisher Protection Mechanism Failure Vulnerability

Microsoft / Publisher

Description

Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.

Scoring

CVSS 7.3 ()
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS2.67% probability of exploitation · percentile 85.3% · 2026-10-06T12:00:23Z
Last modified2026-08-10

CISA KEV entry

Added to KEV: 2024-09-10

(incoming)1

TypeTargetConfidenceTier
KEVEntryMicrosoft Publisher Protection Mechanism Failure Vulnerabilitykev-cve-2024-382260%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Microsoft Office Publisher Security Feature Bypass Vulnerability
CVE
CVE-2026-33114
CVE
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
CVE
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
CVE
Microsoft Office Security Feature Bypass Vulnerability
CVE
Microsoft Power Pages Improper Access Control Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.