CVE-2021-38658HighCVSS 7.8
Microsoft Office Graphics Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.
🎯 Affected products7
- Microsoft Office 2013 RT Service Pack 1
- Microsoft Office 2013 Service Pack 1 (32-bit editions)
- Microsoft Office 2013 Service Pack 1 (64-bit editions)
- Microsoft Office 2016 (32-bit edition)
- Microsoft Office 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
✅ Remediation
KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB5002005 (Security Update) — fixed build 5215.1000 KB5002007 (Security Update) — fixed build 5381.1000
🔗 References (8)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38658
- referencehttps://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
- patchhttps://www.microsoft.com/download/details.aspx?familyid=1d080be7-9ed1-49e1-b7c4-45976a6dd63b
- referencehttps://support.microsoft.com/kb/5002005
- patchhttps://www.microsoft.com/download/details.aspx?familyid=fdb96ab7-c567-48d9-bf4b-5dbcfbf99975
- referencehttps://support.microsoft.com/kb/5002007
- patchhttps://www.microsoft.com/download/details.aspx?familyid=b3e5b65a-d319-459e-acec-91ae93dddc6e
- patchhttps://www.microsoft.com/download/details.aspx?familyid=e7be799b-c25a-4b83-a0c0-e7d70c2a89e8