First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-24511

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Microsoft Office Word Tampering Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Office 2019	>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office 2019 for Mac	>= 16.0.0, < 16.59.22031300
Microsoft	Microsoft 365 Apps for Enterprise	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office LTSC for Mac 2021	>= 16.0.1, < 16.59.22031300
Microsoft	Microsoft Office LTSC 2021	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Word 2016	>= 16.0.1, < 16.0.5290.1000
Microsoft	Microsoft Word 2013 Service Pack 1	>= 15.0.1, < 15.0.5431.1000
Microsoft	Microsoft Word 2013 Service Pack 1	>= 15.0.1, < 15.0.5431.1000

References

Timeline

Published: Mar 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-245126.3.NET and Visual Studio Remote Code Execution Vulnerability CVE-2022-245137.8Visual Studio Elevation of Privilege Vulnerability CVE-2022-245156.5Azure Site Recovery Elevation of Privilege Vulnerability CVE-2022-245168.0Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2022-245177.2Azure Site Recovery Remote Code Execution Vulnerability CVE-2022-245186.5Azure Site Recovery Elevation of Privilege Vulnerability CVE-2022-245196.5Azure Site Recovery Elevation of Privilege Vulnerability CVE-2022-245207.2Azure Site Recovery Remote Code Execution Vulnerability CVE-2022-245217.8Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2022-245226.5Skype Extension for Chrome Information Disclosure Vulnerability CVE-2022-245234.3Microsoft Edge (Chromium-based) Spoofing Vulnerability CVE-2022-245257.0Windows Update Stack Elevation of Privilege Vulnerability

CVE-2022-24511: Medium severity, CVSS 5.5 | Vulnix