CVE-2024-49033

CVE-2024-49033 is a high-severity security feature bypass vulnerability affecting Microsoft Word, Microsoft Office, Microsoft 365 Apps, and Microsoft Office LTSC. With a CVSS score of 7.5, this vulnerability can be exploited remotely with high attack complexity, potentially leading to high impact on confidentiality, integrity, and availability if a user is tricked into interacting with a malicious document. While it has a low EPSS score and is not listed in CISA's KEV catalog, indicating a low probability of active exploitation, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and community discussion and media coverage are minimal, suggesting limited current attention.