CVE-2021-38655HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.
🎯 Affected products12
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Excel 2013 RT Service Pack 1
- Microsoft Excel 2013 Service Pack 1 (32-bit editions)
- Microsoft Excel 2013 Service Pack 1 (64-bit editions)
- Microsoft Excel 2016 (32-bit edition)
- Microsoft Excel 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Office 2019 for Mac
- Microsoft Office Online Server
- Microsoft Office Web Apps Server 2013 Service Pack 1
✅ Remediation
KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KBRelease Notes (Security Update) — fixed build 16.53.21091200 KB5001999 (Security Update) — fixed build 10378.20000 KB5002003 (Security Update) — fixed build 5215.1000 KB5002014 (Security Update) — fixed build 5381.1000 KB5002009 (Security Update) — fixed build 5381.1000
🔗 References (13)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38655
- referencehttps://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
- patchhttps://go.microsoft.com/fwlink/p/?linkid=831049
- patchhttps://www.microsoft.com/download/details.aspx?familyid=0e36e873-904d-4e73-9ab7-236c0e4f119c
- referencehttps://support.microsoft.com/kb/5001999
- patchhttps://www.microsoft.com/download/details.aspx?familyid=c09ce021-f2a5-477c-a92f-2c4ce277bf0c
- referencehttps://support.microsoft.com/kb/5002003
- patchhttps://www.microsoft.com/download/details.aspx?familyid=972f8a7d-1ed3-4dda-8940-a2086665af32
- referencehttps://support.microsoft.com/kb/5002014
- patchhttps://www.microsoft.com/download/details.aspx?familyid=7d4bf628-fcc9-4af7-87ad-93a8bcbf1054
- patchhttps://www.microsoft.com/download/details.aspx?familyid=20044c25-9057-4142-9d0d-c4d82d66b475
- patchhttps://www.microsoft.com/download/details.aspx?familyid=d1e8f050-355c-40b4-b747-ad6c2b544865
- referencehttps://support.microsoft.com/kb/5002009