CVE-2022-30172

CVSS 2.0 Score 4.3 of 10 (medium)

Details

Published Jun 15, 2022
Updated: Jan 2, 2025

Summary

CVE-2022-30172 is an Information Disclosure vulnerability affecting Microsoft Office. This issue allows an attacker to gain unintended access to data by manipulating specially crafted Office files. Successful exploitation could reveal sensitive information, potentially leading to privacy breaches or further attacks. Microsoft has released a patch to address this vulnerability, and users are encouraged to install it promptly to mitigate risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft SharePoint Server

Affected Vendors

  • Microsoft

Advisories, Assessments, and Mitigations