First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-41104

MediumCVSS 5.5/10Last modified Aug 10, 2026

Description

Microsoft Excel Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
Microsoft	Microsoft 365 Apps for Enterprise	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Excel 2013 Service Pack 1	>= 15.0.0.0, < 15.0.5501.1000
Microsoft	Microsoft Excel 2016	>= 16.0.0.0, < 16.0.5369.1000
Microsoft	Microsoft Office 2019	>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
Microsoft	Microsoft Office LTSC 2021	>= 16.0.1, < https://aka.ms/OfficeSecurityReleases

References

Timeline

Published: Nov 9, 2022
Last modified: Aug 10, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-411055.5Microsoft Excel Information Disclosure Vulnerability CVE-2022-411068.8Microsoft Excel Remote Code Execution Vulnerability CVE-2022-411077.8Microsoft Office Graphics Remote Code Execution Vulnerability CVE-2022-411097.8Windows Win32k Elevation of Privilege Vulnerability CVE-2022-41116.5Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.CVE-2022-411137.8Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability CVE-2022-411147.0Windows Bind Filter Driver Elevation of Privilege Vulnerability CVE-2022-411156.6Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability CVE-2022-411165.9Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability CVE-2022-411187.5Windows Scripting Languages Remote Code Execution Vulnerability CVE-2022-411197.8Visual Studio Remote Code Execution Vulnerability CVE-2022-41124.8The Quizlord WordPress plugin through 2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as

CVE-2022-41104: Medium severity, CVSS 5.5 | Vulnix