Microsoft Word Memory Corruption Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 15/02/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| office | = 2011 | |
| office web apps | = 2010 | |
| office web apps server | = 2013 | |
| sharepoint server | = 2010= 2013 | |
| word | = 2003= 2007= 2010= 2013 |
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free