Skip to main content
← All vulnerabilities
CVE-2022-21840

Microsoft Office Remote Code Execution Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 16.0.5266.1000, 15.0.5415.1000, 16.0.10382.20004, 16.57.22011101, 16.0.14326.20714
None on Exploit-DB, Metasploit or GitHub

Summary

Microsoft Office Remote Code Execution Vulnerability

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Microsoft Microsoft SharePoint Enterprise Server 2016

    From 16.0.0 · fixed in 16.0.5266.1000

  • Microsoft Microsoft SharePoint Enterprise Server 2013 Service Pack 1

    From 15.0.0 · fixed in 15.0.5415.1000

  • Microsoft Microsoft SharePoint Server 2019

    From 16.0.0 · fixed in 16.0.10382.20004

  • Microsoft Microsoft Office 2019

    From 19.0.0

  • Microsoft Microsoft Office 2019 for Mac

    From 16.0.0 · fixed in 16.57.22011101

  • Microsoft Microsoft Office Online Server

    From 16.0.1 · fixed in 16.0.10382.20004

  • Microsoft Microsoft 365 Apps for Enterprise

    From 16.0.1

  • Microsoft Microsoft Office LTSC for Mac 2021

    From 16.0.1 · fixed in 16.57.22011101

  • Microsoft Microsoft Office LTSC 2021

    From 16.0.1

  • Microsoft Microsoft SharePoint Server Subscription Edition

    From 16.0.0 · fixed in 16.0.14326.20714

  • Microsoft SharePoint Server Subscription Edition Language Pack

    From 16.0.0 · fixed in 16.0.14326.20714

  • Microsoft Microsoft Excel 2016

    From 16.0.0.0 · fixed in 16.0.5266.1000

  • Microsoft Microsoft Office 2016

    From 16.0.0 · fixed in 16.0.5266.1000

  • Microsoft Microsoft Excel 2013 Service Pack 1

    From 15.0.0.0 · fixed in 15.0.5415.1000

  • Microsoft Microsoft Office 2013 Service Pack 1

    From 15.0.0 · fixed in 15.0.5415.1000

  • Microsoft Microsoft Office Web Apps Server 2013 Service Pack 1

    From 15.0.1 · fixed in 15.0.5415.1000

  • Microsoft Microsoft SharePoint Foundation 2013 Service Pack 1

    From 15.0.0 · fixed in 15.0.5415.1000

References 1

msrc.microsoft.com