Microsoft Word Information Disclosure Vulnerability
CVE-2022-41060

5.5MEDIUM

Key Information:

Vendor: Microsoft
Status: Sharepoint Server Subscription Edition Language Pack; Microsoft Office Ltsc 2021; Microsoft 365 Apps For Enterprise; Microsoft Office Online Server
Vendor: CVE Published:; 9 November 2022

What is CVE-2022-41060?

Microsoft Word Information Disclosure Vulnerability

Microsoft 365 Apps for Enterprise x64-based Systems 16.0.1

Microsoft Office 2019 x64-based Systems 19.0.0

Microsoft Office LTSC 2021 32-bit Systems 16.0.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet