Microsoft Office Security Feature Bypass Vulnerability

The Microsoft Office Products are missing security updates. It is, therefore, affected by the following vulnerability:
  - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising the integrity of the system/application.
    (CVE-2022-29107)

The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerability:

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2022-29107)

This plugin has been deprecated to be brought in line with Tenable's C2R plugin policy. Pleas use smb_nt_ms22_may_office_c2r.nasl instead.

The Microsoft Publisher Products are missing a security update. It is, therefore, affected by the following vulnerability:

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2022-29107)

ID	Name	Product	Family	Severity
162097	Security Updates for Microsoft Office Products C2R (May 2022)	Nessus	Windows	medium
162051	Security Updates for Microsoft Word Products C2R (May 2022)	Nessus	Windows	medium
161089	Security Updates for Microsoft Office Products (May 2022) (deprecated)	Nessus	Windows : Microsoft Bulletins	medium
160939	Security Updates for Microsoft Publisher Products (May 2022)	Nessus	Windows : Microsoft Bulletins	medium
160935	Security Updates for Microsoft Word Products (May 2022)	Nessus	Windows : Microsoft Bulletins	medium

Detections

Analytics

CVE-2022-29107

medium

Tenable Plugins

medium

medium

medium

medium

medium