SenPatch tracker / CVE reference / CVE-2024-49031
CVE-2024-49031
High severity Microsoft vulnerability, CVSS 7.8. Fixed by 1 Microsoft security update.
Risk summary
Exploitation and severity
Not in the CISA KEV catalog. EPSS exploit probability <1%. CVSS 7.8 (High).
This CVE is among the lower half of tracked Microsoft CVEs by EPSS exploit probability.
What to do
Moderate priority: schedule it in your normal patch cycle. In Intune or Defender, confirm whether the fixing update KB5002642 are installed across the affected products. Senserva does this automatically across your tenant and flags every missing patch.
Official patch for CVE-2024-49031
Apply the Microsoft security update below to fix CVE-2024-49031. Each KB page links to the Microsoft Update Catalog download for every affected product.
Affected products
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Office LTSC for Mac 2024
Authoritative references
Want every Microsoft CVE and the patches that fix it, ranked by real-world risk? See the Microsoft Patch Tracker.