CVE-2022-41107

HighCVSS 7.8/10Last modified Aug 10, 2026

Description

Microsoft Office Graphics Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 2019 for Mac>= 16.0.0, < 16.67.22111300
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC for Mac 2021>= 16.0.1, < 16.67.22111300

References

Timeline

Published
Nov 9, 2022
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-411097.8Windows Win32k Elevation of Privilege VulnerabilityCVE-2022-41116.5Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.CVE-2022-411137.8Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityCVE-2022-411147.0Windows Bind Filter Driver Elevation of Privilege VulnerabilityCVE-2022-411156.6Microsoft Edge (Chromium-based) Update Elevation of Privilege VulnerabilityCVE-2022-411165.9Windows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityCVE-2022-411187.5Windows Scripting Languages Remote Code Execution VulnerabilityCVE-2022-411197.8Visual Studio Remote Code Execution VulnerabilityCVE-2022-41124.8The Quizlord WordPress plugin through 2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as CVE-2022-411207.8Microsoft Windows System Monitor (Sysmon) Elevation of Privilege VulnerabilityCVE-2022-411217.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2022-411226.5Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-41107: High severity, CVSS 7.8 | Vulnix