8.8
CVE-2022-21840
- EPSS 3.1%
- Veröffentlicht 11.01.2022 21:15:09
- Zuletzt bearbeitet 19.05.2026 18:38:59
- Erkennungen
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Office Long Term Servicing Channel Version 2021 HwPlatform x64
Microsoft ≫ Office Long Term Servicing Channel Version 2021 HwPlatform x86
Microsoft ≫ Office Long Term Servicing Channel Version 2021 SwPlatform macos
Microsoft ≫ Office Online Server Version -
Microsoft ≫ Office Web Apps Version 2013 Update sp1
Microsoft ≫ Sharepoint Enterprise Server Version 2013 Update sp1
Microsoft ≫ Sharepoint Server Version - SwEdition subscription
Microsoft ≫ Sharepoint Server Version - Update language_pack SwEdition subscription
Microsoft ≫ Sharepoint Server Version 2013 Update sp1 SwEdition enterprise
Microsoft ≫ Sharepoint Server Version 2016 SwEdition enterprise
Microsoft ≫ Sharepoint Server Version 2019
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.1% | 0.865 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| NIST | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
| Microsoft | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21840
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21840