Severity

Medium

Analysis Summary

CVE-2022-41103
Microsoft Word could allow a remote attacker to obtain sensitive information. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.

Impact

Information Disclosure

Indicators Of Compromise

CVE

• CVE-2022-41103

Affected Vendors

Microsoft

Affected Products

Microsoft Word 2013 SP1 x32
Microsoft Word 2013 SP1 x64
Microsoft Word 2013 SP1 RT
Microsoft Word 2016 x32
Microsoft Word 2016 x64

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.
Microsoft Security TechCenter