PT-2024-9222

CVE-2024-49029

Published

2024-11-12

Updated

2024-11-16

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified)

Description: The issue is related to the use of an uninitialized resource in Microsoft Office and Office 365 packages. Exploitation of this issue may allow an attacker to execute arbitrary code. A vulnerability in Microsoft Excel enables remote attackers to execute arbitrary code, affecting the system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Li Shuang

Willj

Vendors

Affected products

Weakness enumeration

CWE-908: Use of Uninitialized Resource

Related identifiers

CVE-2024-49029

BDU:2024-10910