CVE-2022-29109General(microsoft / 365_apps)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Microsoft Excel Remote Code Execution Vulnerability

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 365_apps
  • office
  • office_long_term_servicing_channel
  • office_online_server

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-01-28); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
365_appsofficeoffice_long_term_servicing_channeloffice_online_server

3 versions affected across 4 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-01-28: 1Mentions · 2026-05-19: 1Technical Details · 2026-01-28: 1Technical Details · 2026-05-19: 101-2805-19
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-01-281
General1
2026-05-191
Disclosure1
Full discourse2 posts
  • Israel@f1tym1
    Disclosure

    CVE-2022-29109 | Microsoft Excel Remote Code Execution https://ift.tt/15vO3PK A vulnerability, which was classified as critical, has been found in Microsoft Excel 2019/LTSC 2021/Online Server/365 Apps for Enterprise. This vulnerability affects unknown code. Performing a manipu…

    Post summary

    The post announces a critical CVE-2022-29109 remote code execution flaw in Microsoft Excel, but does not provide a PoC, exploit, or mitigation details.

    0000055
    974 followersView on X
  • Fitness-Mania29@Mania4Pakistan
    General

    https://raptornews29.blogspot.com/2026/01/information-disclosure-vulnerability.html Information Disclosure Vulnerability – CVE-2022-29109 (SharePoint API)

    Post summary

    The brief mention points to CVE-2022-29109, an information disclosure issue in SharePoint API, but provides no additional details or actionable information.

    0000065
    8 followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoft365_apps--x64
Appmicrosoft365_apps--x86
Appmicrosoftoffice2019-x64
Appmicrosoftoffice2019-x86
Appmicrosoftoffice_long_term_servicing_channel2021-x64
Appmicrosoftoffice_long_term_servicing_channel2021-x86
Appmicrosoftoffice_online_server---

Explore more