CVE-2022-41106

2022-11-0922:15:23

[email protected]

web.nvd.nist.gov

cve-2022

microsoft excel

remote code execution

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.013

Percentile

85.6%

JSON

Microsoft Excel Remote Code Execution Vulnerability

Affected configurations

Nvd

Node

microsoft365_appsMatch-enterprise

microsoftexcelMatch2013sp1

microsoftexcelMatch2013sp1rt

microsoftexcelMatch2016

microsoftofficeMatch2019

microsoftofficeMatch2021ltsc

microsoftoffice_online_serverMatch-

microsoftoffice_web_apps_serverMatch2013sp1

VendorProductVersionCPE
microsoft365_apps-cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
microsoftexcel2013cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*
microsoftexcel2013cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
microsoftexcel2016cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*
microsoftoffice2019cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
microsoftoffice2021cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:*:*
microsoftoffice_online_server-cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
microsoftoffice_web_apps_server2013cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	365_apps	-	cpe:2.3:a:microsoft:365_apps:-::::enterprise:::
microsoft	excel	2013	cpe:2.3:a:microsoft:excel:2013:sp1::::::
microsoft	excel	2013	cpe:2.3:a:microsoft:excel:2013:sp1:::rt:::*
microsoft	excel	2016	cpe:2.3:a:microsoft:excel:2016:::::::*
microsoft	office	2019	cpe:2.3:a:microsoft:office:2019:::::::*
microsoft	office	2021	cpe:2.3:a:microsoft:office:2021::::ltsc:::
microsoft	office_online_server	-	cpe:2.3:a:microsoft:office_online_server:-:::::::*
microsoft	office_web_apps_server	2013	cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1::::::