- Vendor / Project
- Microsoft
- Product
- Office
- Date added
- Mar 3, 2022
- Due date
- Mar 24, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-119
Description
A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.
Required action
Apply updates per vendor instructions.