KLA12480 Multiple vulnerabilities in Microsoft Office

Detect date:

03/08/2022

Severity:

High

Description:

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information.

Affected products:

Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Word 2016 (64-bit edition)
Microsoft 365 Apps for Enterprise for 64-bit Systems
Skype Extension for Chrome
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Word 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2019 for Mac
Microsoft Office 2019 for 64-bit editions
Microsoft Office LTSC for Mac 2021
Microsoft Office 2019 for 32-bit editions
Microsoft Word 2016 (32-bit edition)
Microsoft Word 2013 Service Pack 1 (32-bit editions)
Microsoft Word 2013 RT Service Pack 1

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2022-24462
CVE-2022-24510
CVE-2022-24461
CVE-2022-24511
CVE-2022-24522
CVE-2022-24509

Impacts:

ACE

Related products:

Microsoft Office

CVE-IDS:

CVE-2022-244625.5High
CVE-2022-245107.8Critical
CVE-2022-244617.8Critical
CVE-2022-245115.5High
CVE-2022-245226.5High
CVE-2022-245097.8Critical

KB list:

5002139
5002068

Microsoft official advisories: