High · 8.8 CVE-2022-21840 EUVD-2022-26996GHSA-rq4v-w4c3-3h29

Microsoft Office Remote Code Execution Vulnerability

Published Jan 11, 2022 · Updated Jan 2, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft 365 Apps for Enterprise Product: Microsoft Excel 2013 Service Pack 1 Product: Microsoft Excel 2016 Product: Microsoft Office 2013 Service Pack 1 Product: Microsoft Office 2016 Product: Microsoft Office 2019 Product: Microsoft Office 2019 for Mac Product: Microsoft Office LTSC 2021 Product: Microsoft Office LTSC for Mac 2021 Product: Microsoft Office Online Server Product: Microsoft Office Web Apps Server 2013 Service Pack 1 Product: Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Product: Microsoft SharePoint Enterprise Server 2016 Product: Microsoft SharePoint Foundation 2013 Service Pack 1 Product: Microsoft SharePoint Server 2019 Product: Microsoft SharePoint Server Subscription Edition Product: SharePoint Server Subscription Edition Language Pack

Description

Microsoft Office Remote Code Execution Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft SharePoint Enterprise Server 2016	16.0.0 – < 16.0.5266.1000	16.0.5266.1000
Microsoft	Microsoft SharePoint Enterprise Server 2013 Service Pack 1	15.0.0 – < 15.0.5415.1000	15.0.5415.1000
Microsoft	Microsoft SharePoint Server 2019	16.0.0 – < 16.0.10382.20004	16.0.10382.20004
Microsoft	Microsoft Office 2019	19.0.0 – < https://aka.ms/OfficeSecurityReleases	https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office 2019 for Mac	16.0.0 – < 16.57.22011101	16.57.22011101
Microsoft	Microsoft Office Online Server	16.0.1 – < 16.0.10382.20004	16.0.10382.20004
Microsoft	Microsoft 365 Apps for Enterprise	16.0.1 – < https://aka.ms/OfficeSecurityReleases	https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office LTSC for Mac 2021	16.0.1 – < 16.57.22011101	16.57.22011101
Microsoft	Microsoft Office LTSC 2021	16.0.1 – < https://aka.ms/OfficeSecurityReleases	https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft SharePoint Server Subscription Edition	16.0.0 – < 16.0.14326.20714	16.0.14326.20714
Microsoft	SharePoint Server Subscription Edition Language Pack	16.0.0 – < 16.0.14326.20714	16.0.14326.20714
Microsoft	Microsoft Excel 2016	16.0.0.0 – < 16.0.5266.1000	16.0.5266.1000
Microsoft	Microsoft Office 2016	16.0.0 – < 16.0.5266.1000	16.0.5266.1000
Microsoft	Microsoft Excel 2013 Service Pack 1	15.0.0.0 – < 15.0.5415.1000	15.0.5415.1000
Microsoft	Microsoft Office 2013 Service Pack 1	15.0.0 – < 15.0.5415.1000	15.0.5415.1000
Microsoft	Microsoft Office Web Apps Server 2013 Service Pack 1	15.0.1 – < 15.0.5415.1000	15.0.5415.1000
Microsoft	Microsoft SharePoint Foundation 2013 Service Pack 1	15.0.0 – < 15.0.5415.1000	15.0.5415.1000

Advisories 1

MSRC-CVE-2022-21840 Microsoft Office Remote Code Execution Vulnerability Microsoft Security Response Center · Jan 13, 2022

References

Microsoft Office Remote Code Execution Vulnerability vendor-advisory