Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41061

7.8HIGH

Key Information:

Vendor: Microsoft
Status: Sharepoint Server Subscription Edition Language Pack; Microsoft Sharepoint Server Subscription Edition; Microsoft Office Online Server; Microsoft 365 Apps For Enterprise
Vendor: CVE Published:; 9 November 2022

What is CVE-2022-41061?

Microsoft Word Remote Code Execution Vulnerability

Microsoft 365 Apps for Enterprise x64-based Systems 16.0.1

Microsoft Office 2019 for Mac Unknown 16.0.0 < 16.67.22111300

Microsoft Office LTSC for Mac 2021 Unknown 16.0.1 < 16.67.22111300

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet