{"schemaVersion":3,"id":"CVE-2022-22716","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Microsoft Excel Information Disclosure Vulnerability","dates":{"published":"2022-02-09T16:37:06.000Z","modified":"2025-01-02T18:28:13.375Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04604,"percentile":0.91618,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.04604},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.04604,"percentile":0.91618}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04604,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.04604,"percentile":0.91618}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"microsoft","product":"365_apps","name":"365 apps","label":"365_apps","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/365_apps"},{"vendor":"microsoft","product":"excel","name":"excel","label":"excel","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null},{"text":"2016","noFixRecorded":false,"fixedIn":null}],"versionsText":"2013:sp1 | 2016","eol":null,"hubHref":"/vendor/microsoft/excel"},{"vendor":"microsoft","product":"microsoft 365 apps for enterprise","name":"Microsoft 365 Apps for Enterprise","label":"microsoft 365 apps for enterprise","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_365_apps_for_enterprise"},{"vendor":"microsoft","product":"microsoft excel 2013 service pack 1","name":"Microsoft Excel 2013 Service Pack 1","label":"microsoft excel 2013 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 15.0.0.0, < 15.0.5423.1000","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 15.0.0.0, < 15.0.5423.1000","eol":null,"hubHref":"/vendor/microsoft/microsoft_excel_2013_service_pack_1"},{"vendor":"microsoft","product":"microsoft excel 2016","name":"Microsoft Excel 2016","label":"microsoft excel 2016","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.0.0, < 16.0.5278.1000","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.0.0, < 16.0.5278.1000","eol":null,"hubHref":"/vendor/microsoft/microsoft_excel_2016"},{"vendor":"microsoft","product":"microsoft office 2019","name":"Microsoft Office 2019","label":"microsoft office 2019","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_2019"},{"vendor":"microsoft","product":"microsoft office 2019 for mac","name":"Microsoft Office 2019 for Mac","label":"microsoft office 2019 for mac","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.0, < 16.58.22021501","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.0, < 16.58.22021501","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_2019_for_mac"},{"vendor":"microsoft","product":"microsoft office ltsc 2021","name":"Microsoft Office LTSC 2021","label":"microsoft office ltsc 2021","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_ltsc_2021"},{"vendor":"microsoft","product":"microsoft office ltsc for mac 2021","name":"Microsoft Office LTSC for Mac 2021","label":"microsoft office ltsc for mac 2021","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < 16.58.22021501","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < 16.58.22021501","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_ltsc_for_mac_2021"},{"vendor":"microsoft","product":"microsoft office online server","name":"Microsoft Office Online Server","label":"microsoft office online server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < 16.0.10383.20001","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < 16.0.10383.20001","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_online_server"},{"vendor":"microsoft","product":"microsoft office web apps server 2013 service pack 1","name":"Microsoft Office Web Apps Server 2013 Service Pack 1","label":"microsoft office web apps server 2013 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 15.0.1, < 15.0.5423.1000","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 15.0.1, < 15.0.5423.1000","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_web_apps_server_2013_service_pack_1"},{"vendor":"microsoft","product":"microsoft sharepoint enterprise server 2013 service pack 1","name":"Microsoft SharePoint Enterprise Server 2013 Service Pack 1","label":"microsoft sharepoint enterprise server 2013 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 15.0.0, < 15.0.5423.1000","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 15.0.0, < 15.0.5423.1000","eol":null,"hubHref":"/vendor/microsoft/microsoft_sharepoint_enterprise_server_2013_service_pack_1"},{"vendor":"microsoft","product":"office","name":"Office","label":"office","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2019","noFixRecorded":false,"fixedIn":null}],"versionsText":"2019","eol":{"isEol":true,"eolDate":"2025-10-14T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"2019","label":"2019","eolFrom":"2025-10-14T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"office","label":"Microsoft Office","category":"app"}},"hubHref":"/vendor/microsoft/office"},{"vendor":"microsoft","product":"office_long_term_servicing_channel","name":"office long term servicing channel","label":"office_long_term_servicing_channel","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2021","noFixRecorded":false,"fixedIn":null}],"versionsText":"2021","eol":null,"hubHref":"/vendor/microsoft/office_long_term_servicing_channel"},{"vendor":"microsoft","product":"office online server","name":"Office Online Server","label":"office online server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/office_online_server"},{"vendor":"microsoft","product":"office_web_apps","name":"office web apps","label":"office_web_apps","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"2013:sp1","eol":null,"hubHref":"/vendor/microsoft/office_web_apps"},{"vendor":"microsoft","product":"sharepoint_server","name":"sharepoint server","label":"sharepoint_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"2013:sp1","eol":null,"hubHref":"/vendor/microsoft/sharepoint_server"}],"affectedCount":17,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22716","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22716","hostname":"msrc.microsoft.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-02-09T16:37:06.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-01-02T18:28:13.375Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":23,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T22:52:43.805Z","stale":false,"partial":false}}