CVE:CVE-2022-21840
CNNVD:CNNVD-202201-735
Microsoft Office是美国微软（Microsoft）公司的一款办公软件套件产品。该产品常用组件包括Word、Excel、Access、Powerpoint、FrontPage等。
Microsoft Office存在代码注入漏洞。以下产品和版本受到影响：Microsoft SharePoint Enterprise Server 2016,Microsoft SharePoint Enterprise Server 2013 Service Pack 1,Microsoft SharePoint Server 2019,Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit editions,Microsoft Office 2019 for Mac,Microsoft Office Online Server,Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for 64-bit Systems,Microsoft Office LTSC for Mac 2021,Microsoft Office LTSC 2021 for 64-bit editions,Microsoft Office LTSC 2021 for 32-bit editions,Microsoft SharePoint Server Subscription Edition,SharePoint Server Subscription Edition Language Pack,Microsoft Excel 2016 (32-bit edition),Microsoft Excel 2016 (64-bit edition),Microsoft Office 2016 (32-bit edition),Microsoft Office 2016 (64-bit edition),Microsoft Excel 2013 RT Service Pack 1,Microsoft Excel 2013 Service Pack 1 (32-bit editions),Microsoft Excel 2013 Service Pack 1 (64-bit editions),Microsoft Office 2013 RT Service Pack 1,Microsoft Office 2013 Service Pack 1 (32-bit editions),Microsoft Office 2013 Service Pack 1 (64-bit editions),Microsoft Office Web Apps Server 2013 Service Pack 1,Microsoft SharePoint Foundation 2013 Service Pack 1
solution:Upgrade microsoft excel to a higher version than 2013:sp1,2016,and avoid the version 2013:sp1,2016; Upgrade microsoft office to a higher version than 2013:sp1,2016,2019,2021,and avoid the version 2013:sp1,2016,2019,2021; Upgrade microsoft office_online_server to a higher version than -; Upgrade microsoft office_web_apps to a higher version than 2013:sp1,and avoid the version 2013:sp1; Upgrade microsoft sharepoint_enterprise_server to a higher version than 2013:sp1,and avoid the version 2013:sp1; Upgrade microsoft sharepoint_server to a higher version than -,-:language_pack,2013:sp1,2016,2019,and avoid the version -:language_pack,2013:sp1,2016,2019