Microsoft warns Office and Microsoft 365 users of unpatched ‘security flaw’: Affected versions and what to do and not

Microsoft has revealed a serious security flaw in its Office software that could expose sensitive information to hackers. The unpatched vulnerability, labeled CVE-2024-38200 and rated 7.5 on the CVSS scale, allows attackers to impersonate users and potentially access confidential data. Researchers Jim Rush and Metin Yunus Kandemir discovered the vulnerability and reported it to Microsoft.