CVE-2022-21840

Summary

Microsoft Office Remote Code Execution Vulnerability

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft SharePoint Enterprise Server 201616.0.0 < 16.0.5266.1000affected
MicrosoftMicrosoft SharePoint Enterprise Server 2013 Service Pack 115.0.0 < 15.0.5415.1000affected
MicrosoftMicrosoft SharePoint Server 201916.0.0 < 16.0.10382.20004affected
MicrosoftMicrosoft Office 201919.0.0 < https://aka.ms/OfficeSecurityReleasesaffected
MicrosoftMicrosoft Office 2019 for Mac16.0.0 < 16.57.22011101affected
MicrosoftMicrosoft Office Online Server16.0.1 < 16.0.10382.20004affected
MicrosoftMicrosoft 365 Apps for Enterprise16.0.1 < https://aka.ms/OfficeSecurityReleasesaffected
MicrosoftMicrosoft Office LTSC for Mac 202116.0.1 < 16.57.22011101affected
MicrosoftMicrosoft Office LTSC 202116.0.1 < https://aka.ms/OfficeSecurityReleasesaffected
MicrosoftMicrosoft SharePoint Server Subscription Edition16.0.0 < 16.0.14326.20714affected
MicrosoftSharePoint Server Subscription Edition Language Pack16.0.0 < 16.0.14326.20714affected
MicrosoftMicrosoft Excel 201616.0.0.0 < 16.0.5266.1000affected
MicrosoftMicrosoft Office 201616.0.0 < 16.0.5266.1000affected
MicrosoftMicrosoft Excel 2013 Service Pack 115.0.0.0 < 15.0.5415.1000affected
MicrosoftMicrosoft Office 2013 Service Pack 115.0.0 < 15.0.5415.1000affected
MicrosoftMicrosoft Office Web Apps Server 2013 Service Pack 115.0.1 < 15.0.5415.1000affected
MicrosoftMicrosoft SharePoint Foundation 2013 Service Pack 115.0.0 < 15.0.5415.1000affected

Weaknesses

  • Remote Code Execution

ADP Enrichment

CVE Program Container

Additional References

References