Lucene search

K
nvd[email protected]NVD:CVE-2022-41061
HistoryNov 09, 2022 - 10:15 p.m.

CVE-2022-41061

2022-11-0922:15:20
web.nvd.nist.gov
2
microsoft word
remote code execution
vulnerability
cve-2022-41061

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

62.1%

Microsoft Word Remote Code Execution Vulnerability

Affected configurations

NVD
Node
microsoft365_appsMatch-enterprise
OR
microsoftofficeMatch2019macos
OR
microsoftofficeMatch2021ltsc
OR
microsoftofficeMatch2021ltscmacos
OR
microsoftoffice_online_serverMatch-
OR
microsoftoffice_web_apps_serverMatch2013sp1
OR
microsoftsharepoint_enterprise_serverMatch2013sp1
OR
microsoftsharepoint_enterprise_serverMatch2016
OR
microsoftsharepoint_serverMatch-subscription
OR
microsoftsharepoint_serverMatch2019
OR
microsoftwordMatch2013sp1
OR
microsoftwordMatch2013sp1rt
OR
microsoftwordMatch2016

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

62.1%