← CVE Intelligence

CVE-2022-21840

Microsoft Office Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / Microsoft SharePoint Enterprise Server 2016	affected 16.0.0 before 16.0.5266.1000
Microsoft / Microsoft SharePoint Enterprise Server 2013 Service Pack 1	affected 15.0.0 before 15.0.5415.1000
Microsoft / Microsoft SharePoint Server 2019	affected 16.0.0 before 16.0.10382.20004
Microsoft / Microsoft Office 2019	affected 19.0.0 before https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft Office 2019 for Mac	affected 16.0.0 before 16.57.22011101
Microsoft / Microsoft Office Online Server	affected 16.0.1 before 16.0.10382.20004
Microsoft / Microsoft 365 Apps for Enterprise	affected 16.0.1 before https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft Office LTSC for Mac 2021	affected 16.0.1 before 16.57.22011101
Microsoft / Microsoft Office LTSC 2021	affected 16.0.1 before https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft SharePoint Server Subscription Edition	affected 16.0.0 before 16.0.14326.20714
Microsoft / SharePoint Server Subscription Edition Language Pack	affected 16.0.0 before 16.0.14326.20714
Microsoft / Microsoft Excel 2016	affected 16.0.0.0 before 16.0.5266.1000
Microsoft / Microsoft Office 2016	affected 16.0.0 before 16.0.5266.1000
Microsoft / Microsoft Excel 2013 Service Pack 1	affected 15.0.0.0 before 15.0.5415.1000
Microsoft / Microsoft Office 2013 Service Pack 1	affected 15.0.0 before 15.0.5415.1000
Microsoft / Microsoft Office Web Apps Server 2013 Service Pack 1	affected 15.0.1 before 15.0.5415.1000
Microsoft / Microsoft SharePoint Foundation 2013 Service Pack 1	affected 15.0.0 before 15.0.5415.1000

CWE

No CWE identifiers supplied.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21840

ADP enrichment

CVE

No English description supplied.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21840