First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-26901

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Microsoft Excel Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Office 2019 for Mac	>= 16.0.0, < 16.60.22041000
Microsoft	Microsoft Office Online Server	>= 16.0.1, < 16.0.10385.20001
Microsoft	Microsoft 365 Apps for Enterprise	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office LTSC for Mac 2021	>= 16.0.1, < 16.60.22041000
Microsoft	Microsoft Office LTSC 2021	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Excel 2016	>= 16.0.0.0, < 16.0.5305.1000
Microsoft	Microsoft Office 2016	>= 16.0.0, < 16.0.5305.1000
Microsoft	Microsoft Excel 2013 Service Pack 1	>= 15.0.0.0, < 15.0.5441.1000
Microsoft	Microsoft Office 2013 Service Pack 1	>= 15.0.0, < 15.0.5441.1000
Microsoft	Microsoft Office Web Apps Server 2013 Service Pack 1	>= 15.0.1, < 15.0.5441.1000

References

Timeline

Published: Apr 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-269037.8Windows Graphics Component Remote Code Execution Vulnerability CVE-2022-269047.0Windows User Profile Service Elevation of Privilege Vulnerability CVE-2022-269054.3Microsoft Edge (Chromium-based) Spoofing Vulnerability CVE-2022-269075.3Azure SDK for .NET Information Disclosure Vulnerability CVE-2022-269088.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-269098.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-26915.4A vulnerability, which was classified as problematic, has been found in SourceCodester Wedding Hall Booking System. Affected by this issue i CVE-2022-269105.3Skype for Business and Lync Spoofing Vulnerability CVE-2022-269116.5Skype for Business Information Disclosure Vulnerability CVE-2022-269128.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-269137.4Windows Authentication Information Disclosure Vulnerability CVE-2022-269147.8Win32k Elevation of Privilege Vulnerability