Skip to content
OpenAdvisories
High MSRC-CVE-2022-22716 1 CVE

Microsoft Excel Information Disclosure Vulnerability

Published Feb 8, 2022 · Updated Feb 17, 2022 · Revision 2

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Are the updates for the Microsoft Office for Mac currently available?
The security update for Microsoft Office 2019 for Mac and Microsoft Office LTSC for Mac 2021 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.

Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.

What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.

Security updates
15.0.5423.1000 — https://support.microsoft.com/kb/5002147
https — https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
16.58.22021501 — https://go.microsoft.com/fwlink/p/?linkid=831049
16.0.10383.20001 — https://support.microsoft.com/kb/5002133
16.0.5278.1000 — https://support.microsoft.com/kb/5002137
15.0.5423.1000 — https://support.microsoft.com/kb/5002156
15.0.5423.1000 — https://support.microsoft.com/kb/5002149

Vulnerabilities 1

Revision history

  1. #2

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

  2. #1

    Information published.

References