CVE-2022-44696

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Microsoft Office Visio Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases

References

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-446977.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2022-446985.4Windows SmartScreen Security Feature Bypass VulnerabilityCVE-2022-446995.5Azure Network Watcher Agent Security Feature Bypass VulnerabilityCVE-2022-44705.4The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes before outputting tCVE-2022-447027.8Windows Terminal Remote Code Execution VulnerabilityCVE-2022-447047.8Microsoft Windows System Monitor (Sysmon) Elevation of Privilege VulnerabilityCVE-2022-447076.5Windows Kernel Denial of Service VulnerabilityCVE-2022-447088.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-44715.4The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before outputting them back in a pageCVE-2022-447107.8DirectX Graphics Kernel Elevation of Privilege VulnerabilityCVE-2022-447137.5Microsoft Outlook for Mac Spoofing VulnerabilityCVE-2022-447158.8Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload
CVE-2022-44696: High severity, CVSS 7.8 | Vulnix