CVE-2022-22716

MEDIUM

Microsoft Excel - Information Disclosure via Memory Buffer Overflow

Title source: llm

Microsoft Excel Information Disclosure Vulnerability

Core 1

Core References

Vendor Advisory vendor-advisory

CVSS v3 5.5

EPSS 0.0432

EPSS Percentile 90.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-119

Status published

Products (8)

microsoft/365_apps (2 CPE variants)

microsoft/excel 2013 sp1 (3 CPE variants)

microsoft/excel 2016 (2 CPE variants)

microsoft/office 2019 (3 CPE variants)

microsoft/office_long_term_servicing_channel 2021 (3 CPE variants)

microsoft/office_online_server

microsoft/office_web_apps 2013 sp1

microsoft/sharepoint_server 2013 sp1

Published Feb 09, 2022

Tracked Since Feb 18, 2026