CVE-2022-23252

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 09-02-2022 06:15

Last modified: - 15-02-2022 06:23

Total changes: - 2

Description

Microsoft Office Information Disclosure Vulnerability.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Low

Attack complexity

Local

Attack vector

None

Availability

High

Confidentiality

None

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

5.5

Base score

1.8

3.6

Exploitability score

Impact score

Verification logic

vendor=microsoft AND product=365_apps AND version=- AND software_edition=enterprise AND target_hardware=x64

vendor=microsoft AND product=365_apps AND version=- AND software_edition=enterprise AND target_hardware=x86

vendor=microsoft AND product=office AND version=2013 AND update=sp1 AND target_hardware=x64

vendor=microsoft AND product=office AND version=2013 AND update=sp1 AND target_hardware=x86

vendor=microsoft AND product=office AND version=2013 AND update=sp1 AND software_edition=rt

vendor=microsoft AND product=office AND version=2016 AND target_hardware=x64

vendor=microsoft AND product=office AND version=2016 AND target_hardware=x86

vendor=microsoft AND product=office AND version=2019 AND target_hardware=x64

vendor=microsoft AND product=office AND version=2019 AND target_hardware=x86

vendor=microsoft AND product=office_long_term_servicing_channel AND version=2021

vendor=microsoft AND product=office_long_term_servicing_channel AND version=2021 AND target_software=-

Reference

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23252

Keywords

CVE-2022-23252

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-23252

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures