CVE-2022-34717: Microsoft Office Remote Code Execution Vulnerability
Published Aug 9, 2022
·Updated
Microsoft Office Remote Code Execution Vulnerability
Affected Software
16 affected componentsFixes available
Microsoft 365 Apps
Microsoft 365 Apps
Microsoft Office=2013-sp1
Microsoft Office=2013-sp1
Microsoft Office=2013-sp1
Microsoft Office=2016
Microsoft Office=2016
Microsoft Office=2019
Microsoft Office=2019
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office 2013<15.0.5475.1001
15.0.5475.1001
Microsoft Office 2016<16.0.14931.20612
16.0.14931.20612
Microsoft Office 2016<16.0.14931.20612
16.0.14931.20612
Microsoft Office 2013 RT<15.0.5475.1001
15.0.5475.1001
Microsoft Office 2013<15.0.5475.1001
15.0.5475.1001
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.0.5475.1001Patch KB4462142 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.14931.20612Patch KB4462148
Event History
Aug 9, 2022
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·07:55 PM
Data Sourced
via MITRE·07:55 PM
DescriptionSeverity
Data Sourced
via NVD·08:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2022-34717?
CVE-2022-34717 is a Microsoft Office Remote Code Execution vulnerability.
2
How severe is CVE-2022-34717?
CVE-2022-34717 has a severity rating of 8.8 (high).
3
Which versions of Microsoft Office are affected by CVE-2022-34717?
CVE-2022-34717 affects Microsoft Office 2013, Office 2016, Office 2019, Office LTSC 2021, and 365 Apps for Enterprise.
4
How can I fix CVE-2022-34717?
To fix CVE-2022-34717, apply the relevant security update or patch provided by Microsoft.
5
Where can I find more information about CVE-2022-34717?
You can find more information about CVE-2022-34717 on the Microsoft Security Response Center website.