ADV220003 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Defense in Depth Update

Which CVE IDs does ADV220003 cover?

ADV220003 covers the following CVE IDs: ADV220003. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by ADV220003?

ADV220003 affects 5 products, including: Microsoft Office 2013 RT Service Pack 1; Microsoft Office 2013 Service Pack 1 (32-bit editions); Microsoft Office 2013 Service Pack 1 (64-bit editions); Microsoft Office 2016 (32-bit edition); Microsoft Office 2016 (64-bit edition).

ADV220003High

Microsoft Defense in Depth Update

Vendor

Microsoft Security Response Center (MSRC)

Published

November 8, 2022

Last Modified

—

🔗 CVE IDs covered (1)

ADV220003 · pending

📋 Description

Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure. This update provides hardening around IRM-protected documents to ensure the trust-of-certificate chain.

🎯 Affected products5

Microsoft Office 2013 RT Service Pack 1
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)

✅ Remediation

KB3191869 (Security Update) — fixed build 16.0.5369.1000 KB3191875 (Security Update) — fixed build 15.0.5501.1000

🔗 References (5)

patchhttps://www.microsoft.com/download/details.aspx?familyid=4bf81dff-fb42-4738-8f33-1c22097ae46f
referencehttps://support.microsoft.com/kb/3191869
referencehttps://support.microsoft.com/kb/3191875
patchhttps://www.microsoft.com/download/details.aspx?familyid=296eb5c1-8025-4bf5-9348-f098f56cd0b6
patchhttps://www.microsoft.com/download/details.aspx?familyid=986e6189-02e6-467a-940b-4ac20d475b53