CVE-2024-38200Medium· 6.5▾ TwilightPoC availableMicrosoft Office Spoofing Vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 35.8 · likelihood 4.3 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 2 sources. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
22%
Exploit-DB · 1 GitHub repo (last check)
Microsoft Office Spoofing Vulnerability
365_appsoffice = 2016office = 2019office_long_term_servicing_channel = 2021Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-35636Medium· 6.5Microsoft Outlook Information Disclosure Vulnerability
CVE-2023-35311High· 8.8Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2026-97781High· 8.8Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
CVE-2026-97751High· 8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97752High· 8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97753High· 8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.