CVE-2024-38226

Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files. Vendor/Product: Microsoft Publisher. Added to CISA KEV 2024-09-10; required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.