Microsoft Excel Remote Code Execution Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products15

• Microsoft 365 Apps for Enterprise for 32-bit Systems
• Microsoft 365 Apps for Enterprise for 64-bit Systems
• Microsoft Excel 2013 RT Service Pack 1
• Microsoft Excel 2013 Service Pack 1 (32-bit editions)
• Microsoft Excel 2013 Service Pack 1 (64-bit editions)
• Microsoft Excel 2016 (32-bit edition)
• Microsoft Excel 2016 (64-bit edition)
• Microsoft Office 2019 for 32-bit editions
• Microsoft Office 2019 for 64-bit editions
• Microsoft Office 2019 for Mac
• Microsoft Office LTSC 2021 for 32-bit editions
• Microsoft Office LTSC 2021 for 64-bit editions
• Microsoft Office LTSC for Mac 2021
• Microsoft Office Online Server
• Microsoft Office Web Apps Server 2013 Service Pack 1

✅ Remediation

KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KBRelease Notes (Security Update) — fixed build 16.54.21101001 KB5002027 (Security Update) — fixed build 16.0.10379.20000 KB5002030 (Security Update) — fixed build 16.0.5227.1000 KB5002043 (Security Update) — fixed build 15.0.5389.1000 KB5002036 (Security Update) — fixed build 15.0.5389.1000

🔗 References (8)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40474
• patchhttps://go.microsoft.com/fwlink/p/?linkid=831049
• patchhttps://www.microsoft.com/downloads/details.aspx?familyid=170d4991-51ce-42cf-94bf-525555b3a90a
• patchhttps://www.microsoft.com/downloads/details.aspx?familyid=5cbdb0ac-5257-4d9d-8e70-8aaeaaccf57d
• patchhttps://www.microsoft.com/downloads/details.aspx?familyid=cc145d7c-641c-4321-b8e4-bbec79fb6a06
• patchhttps://www.microsoft.com/downloads/details.aspx?familyid=bfe78ef6-1c5c-43ac-8f37-d89176dc2956
• patchhttps://www.microsoft.com/downloads/details.aspx?familyid=e376f413-3f46-4a6e-8a7b-35943a16be24
• patchhttps://www.microsoft.com/downloads/details.aspx?familyid=efc88e0d-4724-4ff3-90ec-9bb7c337af7a