CVE-2021-24108HighCVSS 7.8
Microsoft Office Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? A user needs to be tricked into running malicious files.
Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.
🎯 Affected products11
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office 2010 Service Pack 2 (32-bit editions)
- Microsoft Office 2010 Service Pack 2 (64-bit editions)
- Microsoft Office 2013 RT Service Pack 1
- Microsoft Office 2013 Service Pack 1 (32-bit editions)
- Microsoft Office 2013 Service Pack 1 (64-bit editions)
- Microsoft Office 2016 (32-bit edition)
- Microsoft Office 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
✅ Remediation
KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB4493225 (Security Update) — fixed build 16.0.5134.1000 KB4504703 (Security Update) — fixed build 14.0.7266.5000 KB4493228 (Security Update) KB4493228 (Security Update) — fixed build 15.0.5327.1000
🔗 References (11)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24108
- referencehttps://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
- patchhttps://www.microsoft.com/download/details.aspx?familyid=baa4cc31-967a-4626-b92f-7f3d2d13f742
- referencehttps://support.microsoft.com/kb/4493225
- patchhttps://www.microsoft.com/download/details.aspx?familyid=f458d85e-520a-4d27-a7aa-57ae77c38ade
- patchhttps://www.microsoft.com/download/details.aspx?familyid=37536dff-a146-4d8d-bf9e-b5ea32ee5d69
- referencehttps://support.microsoft.com/kb/4504703
- patchhttps://www.microsoft.com/download/details.aspx?familyid=ab0c19be-f5b6-4320-b5e9-6b36d1430edb
- referencehttps://support.microsoft.com/kb/4493228
- patchhttps://www.microsoft.com/download/details.aspx?familyid=f06bdfa6-4b65-43b2-b550-a2acc8e6b998
- patchhttps://www.microsoft.com/download/details.aspx?familyid=28ccc9d0-846d-485c-8841-fc0f93c7266a