CVE-2022-41061Disclosure(microsoft / 365_apps)

LOWCVSS 7.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Microsoft Word Remote Code Execution Vulnerability

2.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 365_apps
  • office
  • office_long_term_servicing_channel
  • office_online_server

Threat summary

  • Public PoC is present in monitored signal
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
365_appsofficeoffice_long_term_servicing_channeloffice_online_serveroffice_web_apps_serversharepoint_enterprise_serversharepoint_serverword

5 versions affected across 8 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-19: 1PoC Mentioned / Linked · 2026-05-19: 1Technical Details · 2026-05-19: 105-19
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Israel@f1tym1
    Disclosure

    CVE-2022-41061 | Microsoft Word up to 2021 Remote Code Execution https://ift.tt/0THaJy3 A vulnerability labeled as critical has been found in Microsoft Word 2013 SP1/2013 RT SP1/2019/2021/365 Apps for Enterprise. The impacted element is an unknown function. The manipulation re…

    Post summary

    Announces a critical remote code execution vulnerability affecting multiple Microsoft Word versions and provides a link for further details.

    0000054
    974 followersView on X
CPE platform detail13 entries

13 of 13 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoft365_apps---
Appmicrosoftoffice2019macos-
Appmicrosoftoffice_long_term_servicing_channel2021--
Appmicrosoftoffice_long_term_servicing_channel2021macos-
Appmicrosoftoffice_online_server---
Appmicrosoftoffice_web_apps_server2013--
Appmicrosoftsharepoint_enterprise_server2013--
Appmicrosoftsharepoint_enterprise_server2016--
Appmicrosoftsharepoint_server---
Appmicrosoftsharepoint_server2019--
Appmicrosoftword2013--
Appmicrosoftword2013--
Appmicrosoftword2016--

Explore more