Microsoft discloses Word vulnerability that lets documents execute PowerShell commands

[Jan]

Microsoft Office vulnerability lets attackers execute PowerShell commands

Security researchers have discovered a Microsoft Office zero-day vulnerability that lets attackers execute PowerShell commands via a Word document.

The security flaw has been identified as CVE-2022-30190 and has a common vulnerability scoring system severity rating of 7.8 out of 10.

 

[airborne]

Office 2010 with optical install media users checking in, does this affect us?

 

[Jet-Fighter7700]

Office 2010 with optical install media users checking in, does this affect us?

probably does, Office and MS in general is full of holes like Swiss cheese,
better use a free alternative based on FOSS, like LibreOffice/Apache Open office

 

[LCBXX]

Useful article, thanks @Jan!

 

[r00igev@@r]

Microsoft Office vulnerability lets attackers execute PowerShell commands

Security researchers have discovered a Microsoft Office zero-day vulnerability that lets attackers execute PowerShell commands via a Word document.

The security flaw has been identified as CVE-2022-30190 and has a common vulnerability scoring system severity rating of 7.8 out of 10.

Its a feature boet!

 

[backstreetboy]

Just use Google Docs. It's free and no software to install / keep up to date.

 

[prod]

Pretty hectic!