Microsoft Office Spoofing Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products10

• Microsoft 365 Apps for Enterprise for 32-bit Systems
• Microsoft 365 Apps for Enterprise for 64-bit Systems
• Microsoft Office 2013 RT Service Pack 1
• Microsoft Office 2013 Service Pack 1 (32-bit editions)
• Microsoft Office 2013 Service Pack 1 (64-bit editions)
• Microsoft Office 2016 (32-bit edition)
• Microsoft Office 2016 (64-bit edition)
• Microsoft Office 2019 for 32-bit editions
• Microsoft Office 2019 for 64-bit editions
• Microsoft Office 2019 for Mac

✅ Remediation

KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KBRelease Notes (Security Update) — fixed build 16.53.21091200 KB4484103 (Security Update) — fixed build 5215.1000 KB4484108 (Security Update) — fixed build 5381.1000

🔗 References (9)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38650
• referencehttps://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
• patchhttps://go.microsoft.com/fwlink/p/?linkid=831049
• patchhttps://www.microsoft.com/download/details.aspx?familyid=ff70f407-371a-4819-a398-8a224ac559e8
• referencehttps://support.microsoft.com/kb/4484103
• patchhttps://www.microsoft.com/download/details.aspx?familyid=88040d6a-fd8b-413d-934a-d0ac72b8165c
• referencehttps://support.microsoft.com/kb/4484108
• patchhttps://www.microsoft.com/download/details.aspx?familyid=d3959394-f7da-47f9-ace9-f20d44a1ef7d
• patchhttps://www.microsoft.com/download/details.aspx?familyid=656aa8d0-c2cd-455d-b92e-01087886254b