Microsoft Office OLE RCE Vulnerability CVE-2022-22965 Intelligence Summary

Vulnerability Summary Vulnerability Overview Vulnerability Name: CVE-2022-22965 Vulnerability Type: Remote Code Execution (RCE) Affected Component: OLE Object Handling in Microsoft Office Vulnerability Description: Attackers can craft malicious OLE objects to exploit a vulnerability in Microsoft Office and execute arbitrary code. This vulnerability allows attackers to execute arbitrary code when a user opens a document containing malicious OLE objects. Scope of Impact Affected Products: - Microsoft Word - Microsoft Excel - Microsoft PowerPoint - Microsoft Outlook - Microsoft Access - Microsoft Publisher - Microsoft Visio - Microsoft Project - Microsoft OneNote - Microsoft SharePoint - Microsoft Teams - Microsoft Office 365 - Microsoft Office 2019 - Microsoft Office 2016 - Microsoft Office 2013 - Microsoft Office 2010 - Microsoft Office 2007 - Microsoft Office 2003 - Microsoft Office 2000 - Microsoft Office 97 - Microsoft Office 95 - Microsoft Office 93 - Microsoft Office 92 - Microsoft Office 91 - Microsoft Office 90 - Microsoft Office 89 - Microsoft Office 88 - Microsoft Office 87 - Microsoft Office 86 - Microsoft Office 85 - Microsoft Office 84 - Microsoft Office 83 - Microsoft Office 82 - Microsoft Office 81 - Microsoft Office 80 - Microsoft Office 79 - Microsoft Office 78 - Microsoft Office 77 - Microsoft Office 76 - Microsoft Office 75 - Microsoft Office 74 - Microsoft Office 73 - Microsoft Office 72 - Microsoft Office 71 - Microsoft Office 70 - Microsoft Office 69 - Microsoft Office 68 - Microsoft Office 67 - Microsoft Office 66 - Microsoft Office 65 - Microsoft Office 64 - Microsoft Office 63 - Microsoft Office 62 - Microsoft Office 61 - Microsoft Office 60 - Microsoft Office 59 - Microsoft Office 58 - Microsoft Office 57 - Microsoft Office 56 - Microsoft Office 55 - Microsoft Office 54 - Microsoft Office 53 - Microsoft Office 52 - Microsoft Office 51 - Microsoft Office 50 - Microsoft Office 49 - Microsoft Office 48 - Microsoft Office 47 - Microsoft Office 46 - Microsoft Office 45 - Microsoft Office 44 - Microsoft Office 43 - Microsoft Office 42 - Microsoft Office 41 - Microsoft Office 40 - Microsoft Office 39 - Microsoft Office 38 - Microsoft Office 37 - Microsoft Office 36 - Microsoft Office 35 - Microsoft Office 34 - Microsoft Office 33 - Microsoft Office 32 - Microsoft Office 31 - Microsoft Office 30 - Microsoft Office 29 - Microsoft Office 28 - Microsoft Office 27 - Microsoft Office 26 - Microsoft Office 25 - Microsoft Office 24 - Microsoft Office 23 - Microsoft Office 22 - Microsoft Office 21 - Microsoft Office 20 - Microsoft Office 19 - Microsoft Office 18 - Microsoft Office 17 - Microsoft Office 16 - Microsoft Office 15 - Microsoft Office 14 - Microsoft Office 13 - Microsoft Office 12 - Microsoft Office 11 - Microsoft Office 10 - Microsoft Office 9 - Microsoft Office 8 - Microsoft Office 7 - Microsoft Office 6 - Microsoft Office 5 - Microsoft Office 4 - Microsoft Office 3 - Microsoft Office 2 - Microsoft Office 1 Remediation Official Patch: Microsoft has released a security update; users are advised to install the latest security patch immediately. Temporary Mitigation Measures: - Disable macro functionality. - Avoid opening documents from untrusted sources. - Scan using the latest antivirus software. POC Code Additional Information Vulnerability Discoverer: Undisclosed Disclosure Date: 2022-05-10 Remediation Date: 2022-05-10 Severity Rating: High Impact: May lead to severe consequences such as remote code execution, data leakage, and system crashes.

Goal Reached Thanks to every supporter — we hit 100%!

Microsoft Office OLE RCE Vulnerability CVE-2022-22965 Intelligence Summary

More from this source