CVE-2022-35742HighCVSS 7.5
Microsoft Outlook Denial of Service Vulnerability
🔗 CVE IDs covered (1)
📋 Description
How could an attacker exploit this vulnerability? The attacker could exploit this vulnerability by sending a specially crafted email which triggers automatically when it is retrieved and processed by the email server. This could lead to a denial of service BEFORE the email is viewed in the Preview Pane.
🎯 Affected products11
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Office LTSC 2021 for 32-bit editions
- Microsoft Office LTSC 2021 for 64-bit editions
- Microsoft Outlook 2013 RT Service Pack 1
- Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
- Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
- Microsoft Outlook 2016 (32-bit edition)
- Microsoft Outlook 2016 (64-bit edition)
✅ Remediation
KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB5002051 (Security Update) — fixed build 16.0.4966.1000 KB5001990 (Security Update) — fixed build 15.0.5475.1001
🔗 References (5)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35742
- patchhttps://www.microsoft.com/download/details.aspx?familyid=8b792f48-8003-4dff-bf18-25e78521c840
- patchhttps://www.microsoft.com/download/details.aspx?familyid=1860e317-1de9-4f8c-82f7-3cc7abf9967b
- patchhttps://www.microsoft.com/download/details.aspx?familyid=57639b94-23e6-455d-a4e0-54b1a29c9808
- patchhttps://www.microsoft.com/download/details.aspx?familyid=f94906a7-057c-442b-9cf5-e1f09b5ed0d8