CVE-2022-41043HighCVSS 3.3

Microsoft Office Information Disclosure Vulnerability

Published
October 11, 2022
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2022-41043 →

📋 Description

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is user tokens and other potentially sensitive information.

According to the CVSS metric, the attack vector is local (AV:L). What does this mean for this vulnerability? The attacker would have to be an authenticated user logged on to the vulnerable system to be able to exploit this vulnerability.

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability? The attacker must be authenticated to be able to exploit this vulnerability.

Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.

🎯 Affected products2

  • Microsoft Office 2019 for Mac
  • Microsoft Office LTSC for Mac 2021

✅ Remediation

KBRelease Notes (Security Update) — fixed build 16.66.22100900

🔗 References (2)