Vulnerability Spotlight: Microsoft Office class attribute double-free vulnerability

Summary: Cisco Talos discovered a class attribute double-free vulnerability in Microsoft Office Excel, tracked as TALOS-2022-1591 (CVE-2022-41106), that lets an attacker supply a malicious file to trigger possible arbitrary code execution. Talos confirmed the flaw could be exploited in Excel 2019 x86 version 2207 build 15427.20210 and version 2202 build 14931.20660, worked with Microsoft on a fix, and published Snort rules 60500-60501 to detect exploitation attempts.
Bottom line: A malicious spreadsheet that triggers arbitrary code execution is a document your users open without a second thought, and Talos confirmed the exploit against specific Excel 2019 builds - so the gap between patch and compromise is one file.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-41106
Related: Microsoft Patch Tuesday for November 2022 — Snort rules and prominent vulnerabilities Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026