How to update ‘Microsoft Office 365 & Office 2013 ClickToRun’ with Intune
Question
Hi Experts,
As per the recent Microsoft Office ClickToRun Remote Code Execution | CVE-2022-22004 vulnerabilities it is mentioned that there is patch available to remediate.
Could you please suggest how we can patch office update ‘Microsoft Office 365 & Office 2013 ClickToRun’ with Intune.
Affected Products: Microsoft 365 Apps for Enterprise for 64 and 32-bit systems, Office 2013 Click-to-Run (C2R) for 64 and 32-bit
Thanks,
Answer ( 1 )
It should be automatically updated using the Office 365 monthly update mechanism. You don’t have to do anything I assume.
Make sure you have the following selected for Office updates and patching from any of the office application
Updates are automatically downloaded and installed.
You can also follow the steps to force the updates
To test your policy, you can force the policy settings on the device. The following steps update the registry. As always, be careful when updating the registry.
Clear the registry key:
Go to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\Updates.
Double-select the UpdateDetectionLastRunTime key, delete the value data > OK.
Run the Office Automatic Updates task:
Open the Task Scheduler app on the device.
Expand Task Scheduler Library > Microsoft > Office.
Select Office Automatic Updates 2.0 > Run:
Some other troubleshooting options
https://docs.microsoft.com/en-us/mem/intune/configuration/administrative-templates-update-office