CVE-2022-29107

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Microsoft Office Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Word 2016>= 16.0.1, < 16.0.5317.1000
MicrosoftMicrosoft Publisher 2016>= 16.0.0, < 16.0.5317.1000
MicrosoftMicrosoft Publisher 2013 Service Pack 1>= 15.0.0, < 15.0.5449.1000
MicrosoftMicrosoft Word 2013 Service Pack 1>= 15.0.1, < 15.0.5449.1000
MicrosoftMicrosoft Word 2013 Service Pack 1>= 15.0.1, < 15.0.5449.1000

References

Timeline

Published
May 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-291088.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-291097.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2022-291107.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2022-291117.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2022-291126.5Windows Graphics Component Information Disclosure VulnerabilityCVE-2022-291137.8Windows Digital Media Receiver Elevation of Privilege VulnerabilityCVE-2022-291145.5Windows Print Spooler Information Disclosure VulnerabilityCVE-2022-291157.8Windows Fax Service Remote Code Execution VulnerabilityCVE-2022-291164.7Windows Kernel Information Disclosure VulnerabilityCVE-2022-291177.5.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-291197.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2022-29124.3The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change t
CVE-2022-29107: Medium severity, CVSS 5.5 | Vulnix