CVE-2021-1711HighCVSS 7.8
Microsoft Office Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.
🎯 Affected products11
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office 2010 Service Pack 2 (32-bit editions)
- Microsoft Office 2010 Service Pack 2 (64-bit editions)
- Microsoft Office 2013 RT Service Pack 1
- Microsoft Office 2013 Service Pack 1 (32-bit editions)
- Microsoft Office 2013 Service Pack 1 (64-bit editions)
- Microsoft Office 2016 (32-bit edition)
- Microsoft Office 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
✅ Remediation
KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB4486755 (Security Update) KB4493143 (Security Update) KB4486762 (Security Update)
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1711
- patchhttps://www.microsoft.com/download/details.aspx?familyid=74af4418-a070-45b5-9605-cbe603ac7d7f
- patchhttps://www.microsoft.com/download/details.aspx?familyid=03612d0a-cbd1-447e-be52-0235c8699150
- patchhttps://www.microsoft.com/download/details.aspx?familyid=d715c6ce-4abf-4014-baf4-4ae3f8a0e79d
- patchhttps://www.microsoft.com/download/details.aspx?familyid=2d85c953-1523-47ed-8ef7-e819da81bc09
- patchhttps://www.microsoft.com/download/details.aspx?familyid=0c9ba7cf-577b-46b8-8bcb-a4fe8448a792
- patchhttps://www.microsoft.com/download/details.aspx?familyid=bae990c8-5c04-41e5-8a81-71e87bdb4867