What the vulnerability does
01Description
Scripting Engine Memory Corruption Vulnerability
CVE-2024-38178
HIGH
CVE-2024-38178: Scripting Engine Memory Corruption Vulnerability
CVSS base score
7.5/10
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
CISA mandated remediation
02CISA Required Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Key dates
03Disclosure timeline
August 13, 2024
CVE published
October 21, 2025
Record updated
External resources
04References
NVD — National Vulnerability Database
https://nvd.nist.gov/vuln/detail/CVE-2024-38178
CWE — Common Weakness Enumeration
https://cwe.mitre.org/data/definitions/843.html
CISA KEV Reference
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024…
CISA KEV Reference
https://nvd.nist.gov/vuln/detail/CVE-2024-38178
Related vulnerabilities
