CVE-2022-38049

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Microsoft Office Graphics Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-38057.5The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in CVE-2022-380507.8Win32k Elevation of Privilege VulnerabilityCVE-2022-380517.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2022-380538.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-380549.8In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.CVE-2022-380555.4Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Content SpoCVE-2022-380565.3Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of CVE-2022-380579.8Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/CVE-2022-380584.3Authenticated (subscriber+) Plugin Setting change vulnerability in WP Shamsi plugin <= 4.1.1 at WordPress.CVE-2022-380598.0Cross-Site Request Forgery (CSRF) vulnerability in Alexey Trofimov's Access Code Feeder plugin <= 1.0.3 at WordPress.CVE-2022-38069.8Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer.CVE-2022-380608.8A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/s
CVE-2022-38049: High severity, CVSS 7.8 | Vulnix