Summary
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.
- Vendor
- Microsoft
- Product
- Office
- Added to KEV
- Mar 3, 2022
- Remediation due
- Mar 24, 2022 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-119
- EPSS
- 82.2% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References