๐Ÿ” CVE Alert

CVE-2022-41060

MEDIUM 5.5

Microsoft Word Information Disclosure Vulnerability

CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th

Microsoft Word Information Disclosure Vulnerability

Vendor microsoft
Product sharepoint server subscription edition language pack
Ecosystems
Industries
TechnologyEnterprise
Published Nov 9, 2022
Last Updated Jan 2, 2025
Stay Ahead of the Next One

Get instant alerts for microsoft sharepoint server subscription edition language pack

Be the first to know when new medium vulnerabilities affecting microsoft sharepoint server subscription edition language pack are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Microsoft / SharePoint Server Subscription Edition Language Pack
16.0.0 < 16.0.15601.20238
Microsoft / Microsoft Office LTSC 2021
16.0.1 < https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft 365 Apps for Enterprise
16.0.1 < https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft Office Online Server
16.0.1 < 16.0.10392.20000
Microsoft / Microsoft Office 2019
19.0.0 < https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft Word 2016
16.0.1 < 16.0.5369.1000
Microsoft / Microsoft SharePoint Enterprise Server 2013 Service Pack 1
15.0.0 < 15.0.5501.1000
Microsoft / Microsoft SharePoint Server 2019
16.0.0 < 16.0.10392.20000
Microsoft / Microsoft SharePoint Enterprise Server 2016
16.0.0 < 16.0.5369.1000
Microsoft / Microsoft Word 2013 Service Pack 1
15.0.1 < 15.0.5501.1000
Microsoft / Microsoft Office Web Apps Server 2013 Service Pack 1
15.0.1 < 15.0.5501.1000
Microsoft / Microsoft Word 2013 Service Pack 1
15.0.1 < 15.0.5501.1000

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
msrc.microsoft.com: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41060