CVE-2021-28452HighCVSS 7.1
Microsoft Outlook Memory Corruption Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.
🎯 Affected products11
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Outlook 2010 Service Pack 2 (32-bit editions)
- Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
- Microsoft Outlook 2013 RT Service Pack 1
- Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
- Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
- Microsoft Outlook 2016 (32-bit edition)
- Microsoft Outlook 2016 (64-bit edition)
✅ Remediation
KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB4504712 (Security Update) KB4504733 (Security Update) KB4493185 (Security Update)
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28452
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=8a77f591-8d6e-4461-b82f-226921e8b6d1
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=f2e50154-9de0-48d8-bfd0-c34c0bb34c80
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=47ce1a6d-075d-48d6-824b-1dc470bbd110
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=fcb645cd-cd7f-480f-b0cd-66ebaa82faaa
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=8bd6f3a1-1fc6-4ade-8d90-f949345246b4
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=3a32e91d-291e-42fa-b513-bd3fdcfe677a