Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products9

• Microsoft 365 Apps for Enterprise for 32-bit Systems
• Microsoft 365 Apps for Enterprise for 64-bit Systems
• Microsoft Office 2013 RT Service Pack 1
• Microsoft Office 2013 Service Pack 1 (32-bit editions)
• Microsoft Office 2013 Service Pack 1 (64-bit editions)
• Microsoft Office 2016 (32-bit edition)
• Microsoft Office 2016 (64-bit edition)
• Microsoft Office 2019 for 32-bit editions
• Microsoft Office 2019 for 64-bit editions

✅ Remediation

KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB5001997 (Security Update) — fixed build 5215.1000 KB5001958 (Security Update) — fixed build 5381.1000

🔗 References (8)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38646
• referencehttps://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
• patchhttps://www.microsoft.com/download/details.aspx?familyid=5fc41c1d-ca0d-4250-907e-1e9e55498c05
• referencehttps://support.microsoft.com/kb/5001997
• patchhttps://www.microsoft.com/download/details.aspx?familyid=fa7826f4-771f-4c30-9a8a-a663d4f9d098
• referencehttps://support.microsoft.com/kb/5001958
• patchhttps://www.microsoft.com/download/details.aspx?familyid=41f28314-646f-4e17-829e-2bfdd3e94f56
• patchhttps://www.microsoft.com/download/details.aspx?familyid=c94f1c97-6583-458d-bfe3-5fa0e424b5b9