Microsoft Office ClickToRun Remote Code Execution Vulnerability
CVE-2022-22004 is a remote code execution vulnerability in Microsoft Office (rated Important, CVSS 7.8).
1 version
Facts
- Microsoft id
CVE-2022-22004- Products
- Microsoft Office
- Severity
- Important
- Impact
- Remote Code Execution
- CVSS
- 7.8
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Less Likely
- Customer action required
- Yes
- Release
- 2022-Feb
- Assigned by
- Microsoft
- MSRC revision
- 1.0
- Status pages
- Microsoft 365 apps status
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2022-02-08:
Information published.
Microsoft says
According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?
What Microsoft changed
We have one version of this item so far. When Microsoft edits it (a new date, status or text), the earlier version stays here and the change is shown.
Related changes
Other changes for Microsoft 365 apps
- Microsoft Office Remote Code Execution Vulnerability
- Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Excel Information Disclosure Vulnerability
- Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Excel Remote Code Execution Vulnerability