Lucene search

K
nvd[email protected]NVD:CVE-2022-41060
HistoryNov 09, 2022 - 10:15 p.m.

CVE-2022-41060

2022-11-0922:15:20
web.nvd.nist.gov
1
microsoft word
information disclosure
vulnerability
cve-2022-41060

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

46.2%

Microsoft Word Information Disclosure Vulnerability

Affected configurations

NVD
Node
microsoft365_appsMatch-enterprise
OR
microsoftofficeMatch2019
OR
microsoftofficeMatch2021ltsc
OR
microsoftoffice_online_serverMatch-
OR
microsoftoffice_web_apps_serverMatch2013sp1
OR
microsoftsharepoint_enterprise_serverMatch2013sp1
OR
microsoftsharepoint_enterprise_serverMatch2016
OR
microsoftsharepoint_serverMatch-subscription
OR
microsoftsharepoint_serverMatch2019
OR
microsoftwordMatch2013sp1
OR
microsoftwordMatch2013sp1rt
OR
microsoftwordMatch2016

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

46.2%