CVE-2024-38021

Microsoft Office uzaktan kod calistirma acigi (RCE). DBatLoader ve GuLoader kampanyalarinda kotu amacli Office dokumanlarinin payload calistirmak icin kullandigi kritik acik.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 9.8 / 10.0

Severity Kritik

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Microsoft Office 2016/2019/2021, M365

Exploitation Method Remote Code Execution

MITRE ATT&CK T1203 - Exploitation for Client Execution

CVE-2024-38021 Analizi

Microsoft Office kritik uzaktan kod calistirma acigi. Kimlik dogrulama gerektirmeksizin ozel hazirlanmis Office dokumanlarinin acilmasiyla tetikleniyor. DBatLoader kampanyalarinda genis capli kullanim gorulmustur.

Teknik Detaylar

CVSS: 9.8/10
Etkilenen: Microsoft Office 2016-2021, M365
Vektoru: Kotu amacli .doc/.xls eki

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs