7.8

CVE-2022-41061

Microsoft Word Remote Code Execution Vulnerability

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ 365 Apps Version- SwEditionenterprise
Microsoft ≫ Office Version2019 SwPlatformmacos
Microsoft ≫ Office Version2021 SwEditionltsc
Microsoft ≫ Office Version2021 SwEditionltsc SwPlatformmacos
Microsoft ≫ Office Web Apps Server Version2013 Updatesp1
Microsoft ≫ Sharepoint Enterprise Server Version2013 Updatesp1
Microsoft ≫ Sharepoint Server Version- SwEditionsubscription
Microsoft ≫ Sharepoint Server Version2019
Microsoft ≫ Word Version2013 Updatesp1
Microsoft ≫ Word Version2013 Updatesp1 SwEditionrt
Microsoft ≫ Word Version2016
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.27% 0.498
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
secure@microsoft.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.