CVE-2022-21840

Microsoft Office Remote Code Execution Vulnerability
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x64:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x64:*
cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x86:*
cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:macos:*:*
cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:-:language_pack:*:*:subscription:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*

History

14 Nov 2024, 21:15

Type Values Removed Values Added
References
  • {'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21840', 'tags': ['Patch', 'Vendor Advisory'], 'source': 'secure@microsoft.com'}
  • () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21840 -

21 Dec 2023, 01:15

Type Values Removed Values Added
Summary Microsoft Office Remote Code Execution Vulnerability. Microsoft Office Remote Code Execution Vulnerability

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-94 NVD-CWE-noinfo

14 Jan 2022, 16:45

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:macos:*:*
cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x86:*
cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:sharepoint_server:-:language_pack:*:*:subscription:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x64:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x64:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*
cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
CWE CWE-94
References (MISC) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21840 - (MISC) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21840 - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : 8.8
v2 : 6.8
v3 : 8.8

11 Jan 2022, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-01-11 21:15

Updated : 2024-11-14 21:15


NVD link : CVE-2022-21840

Mitre link : CVE-2022-21840

CVE.ORG link : CVE-2022-21840


JSON object : View

Products Affected

microsoft

  • office_web_apps
  • office
  • sharepoint_enterprise_server
  • sharepoint_server
  • excel
  • office_online_server