CVSS 3.1 Score 7.8 of 10 (high)


Published Jan 9, 2024
Updated: Mar 23, 2024


CVE-2024-20677 is a security vulnerability in FBX that could result in remote code execution. To address this issue, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint, and Outlook for both Windows and Mac. Versions of Office that had this feature enabled, including Office 2019, Office 2021, Office LTSC for Mac 2021, and Microsoft 365, will no longer have access to it. Additionally, starting from February 13, 2024, the ability to insert FBX files has been disabled in 3D Viewer. However, previously inserted 3D models from FBX files will continue to function correctly unless the "Link to File" option was chosen during insertion. This change was implemented as part of the January 9, 2024 security update. The vulnerability poses a high risk with a base severity rating of 7.8 out of 10 and can lead to potential compromise of confidentiality and integrity.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-20677 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options