PT-2022-5647 · Microsoft · 365 Apps For Enterprise+2

Rocco Calvi + 1 · Published 2022-11-08 · Updated 2026-05-19 · CVE-2022-41063

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions (affected versions not specified) Microsoft Excel versions (affected versions not specified) Microsoft Office versions (affected versions not specified)

Description The issue exists due to insufficient input validation in Microsoft software. It allows an attacker to execute arbitrary code using a specially crafted file.

Recommendations For Microsoft 365 Apps for Enterprise, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microsoft Excel, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microsoft Office, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-07015

CVE-2022-41063

Affected Products

365 Apps For Enterprise

Office Excel

Office

References · 11

• https://osv.dev/vulnerability/CVE-2022-41063 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41063 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07015 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41063 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/686265 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-41063 · Security Note
• https://twitter.com/f1tym1/status/2056847233861984405 · Twitter Post
• https://t.me/cibsecurity/52765 · Telegram Post
• https://t.me/cvenotify/37661 · Telegram Post
• https://t.me/cvenotify/37824 · Telegram Post
• https://t.me/cibsecurity/52743 · Telegram Post