Security Updates for Microsoft Office Products C2R (February 2022)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Two remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-22003, CVE-2022-22004 - An...

CVE-2022-22003 Microsoft Office Graphics Remote Code Execution Vulnerability

...

CVE-2022-22003

CVE-2022-22003 : Microsoft Office Graphics Remote Code Execution Vulnerability. The connected Nessus/NASL data indicate this vulnerability allows execution of arbitrary code via a crafted Office Graphics file, requiring a local user to open a malicious file. Remediation is documented in Microsoft...