{"id":"CVE-2022-34717","title":"Microsoft Office Remote Code Execution Vulnerability","summary":"Microsoft Office Remote Code Execution Vulnerability","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cvssSource":"cna","vendor":"Microsoft","product":"Microsoft Office 2019","affected":["office_2019 >= 19.0.0 < https://aka.ms/OfficeSecurityReleases","365_apps_for_enterprise >= 16.0.1 < https://aka.ms/OfficeSecurityReleases","office_ltsc_2021 >= 16.0.1 < https://aka.ms/OfficeSecurityReleases","office_2016 >= 16.0.0 < 16.0.14931.20612","office_2013_service_pack_1 >= 15.0.0 < 15.0.5475.1001"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-08T21:11:13.482304Z"},"published":"2022-08-09","updated":"2026-11-02","sourceUpdated":"2026-11-02T22:12:02.881Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-34717","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34717","label":"Microsoft Office Remote Code Execution Vulnerability"}],"tags":["cve.org"],"epss":0.01994,"epssPercentile":0.80755,"ingestedAt":"2026-11-05T19:30:42.871Z","slug":"CVE-2022-34717","body":"## Overview\n\nMicrosoft Office Remote Code Execution Vulnerability\n\n## Affected\n\n- `office_2019 >= 19.0.0 < https://aka.ms/OfficeSecurityReleases`\n- `365_apps_for_enterprise >= 16.0.1 < https://aka.ms/OfficeSecurityReleases`\n- `office_ltsc_2021 >= 16.0.1 < https://aka.ms/OfficeSecurityReleases`\n- `office_2016 >= 16.0.0 < 16.0.14931.20612`\n- `office_2013_service_pack_1 >= 15.0.0 < 15.0.5475.1001`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.4,"exploitation":0,"ransomware":0},"changes":[]}