CVE-2022-21841

Deeper analysis

Microsoft Excel contains a remote code execution vulnerability that allows an attacker to execute arbitrary code on an affected system. The flaw affects Microsoft Excel and carries a CVSS 3.1 score of 7.8 with an attack vector of local access, low complexity, no privileges required, and user interaction needed to trigger the issue, resulting in high impact to confidentiality, integrity, and availability.

An attacker can exploit the vulnerability by supplying a specially crafted Excel file that, once opened by a victim, leads to code execution in the context of the current user. This enables full compromise of the affected workstation, including data theft, persistence, or further lateral movement within an environment.

Microsoft has published security updates and guidance addressing the issue through its Security Response Center advisories. The EPSS score for the vulnerability rose materially from a low baseline to a peak of 0.1804 on 2025-01-22 before receding to the current value of 0.0416, indicating a later surge in observed exploitation interest after initial disclosure.