CVE-2022-22003: Microsoft Office Graphics Remote Code Execution Vulnerability
Published Feb 8, 2022
·Updated
Microsoft Office Graphics Remote Code Execution Vulnerability
Affected Software
25 affected componentsFixes available
Microsoft Office LTSC for Mac 2021
Microsoft Office 2013
Microsoft Office 2013
Microsoft Office 2019 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2016
Microsoft Office 2016
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps
Microsoft 365 Apps
Microsoft Office=2013-sp1
Microsoft Office=2013-sp1
Microsoft Office=2013_rt-sp1
Microsoft Office=2016
Microsoft Office=2016
Microsoft Office=2019
Microsoft Office=2019
Microsoft Office Macos=2019
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel Macos=2021
Microsoft Office 2019 for Mac
Microsoft Office 2013 RT
Event History
Feb 8, 2022
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
Description
Feb 9, 2022
CVE Published
via MITRE·04:36 PM
Data Sourced
via MITRE·04:36 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2022-22003?
CVE-2022-22003 is a Microsoft Office Graphics Remote Code Execution vulnerability.
2
What is the severity of CVE-2022-22003?
CVE-2022-22003 has a severity rating of 7.8, which is considered high.
3
Which software versions are affected by CVE-2022-22003?
CVE-2022-22003 affects multiple versions of Microsoft Office, including Office 2013, Office 2016, Office 2019, Office 365 Apps for Enterprise, and Office LTSC.
4
How can I fix CVE-2022-22003?
To fix CVE-2022-22003, you should apply the patches provided by Microsoft for the affected versions of Microsoft Office.
5
Where can I find more information about CVE-2022-22003?
You can find more information about CVE-2022-22003 on the Microsoft Security Response Center (MSRC) website.