Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-89423
HistoryDec 19, 2022 - 12:00 a.m.

Microsoft Office Graphics remote code execution vulnerability (CNVD-2022-89423)

2022-12-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Microsoft Office is an office software suite product of the United States Microsoft Corporation (Microsoft). Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. A remote code execution vulnerability exists in Microsoft Office Graphics. An attacker could exploit the vulnerability to execute code on the target host.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H