CVE-2022-38049
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2022-38049 is a remote code execution vulnerability affecting Microsoft Office. The issue lies within the handling of Microsoft Office Graphics files, which can be exploited by attackers to execute malicious code on a victim's system, potentially leading to unauthorized system access or data theft. Successful exploitation of this vulnerability can occur when a user opens a specially crafted Office Graphics file, making it crucial for users to exercise caution when handling untrusted email attachments or downloaded files. Microsoft has released patches to address this vulnerability, and it is recommended that users install these updates as soon as possible to protect their systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Office
- Microsoft Office Long Term Servicing Channel
- Microsoft 365 Apps
- Microsoft Office 2019
- Microsoft Office 365
Affected Vendors
- Microsoft