Input validation error in Microsoft products - CVE-2022-24511
Published: March 8, 2022
Vulnerability identifier: #VU61180
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-24511
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to tampering issue in Microsoft Office Word. A remote attacker can bypass the target application
Affected software
Microsoft Office LTSC
Microsoft 365 Apps for Enterprise
Microsoft Word
Microsoft Office
Microsoft 365 Apps for Enterprise
Microsoft Word
Microsoft Office
How to mitigate CVE-2022-24511
Install updates from vendor's website.