Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products11

• Microsoft 365 Apps for Enterprise for 32-bit Systems
• Microsoft 365 Apps for Enterprise for 64-bit Systems
• Microsoft Office 2013 RT Service Pack 1
• Microsoft Office 2013 Service Pack 1 (32-bit editions)
• Microsoft Office 2013 Service Pack 1 (64-bit editions)
• Microsoft Office 2016 (32-bit edition)
• Microsoft Office 2016 (64-bit edition)
• Microsoft Office 2019 for 32-bit editions
• Microsoft Office 2019 for 64-bit editions
• Microsoft Office LTSC 2021 for 32-bit editions
• Microsoft Office LTSC 2021 for 64-bit editions

✅ Remediation

KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB5002099 (Security Update) — fixed build 16.0.5254.1000 KB5002104 (Security Update) — fixed build 15.0.5407.1000

🔗 References (7)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42293
• patchhttps://www.microsoft.com/downloads/details.aspx?familyid=c5738e86-427e-4284-9f69-b77eb2b33e73
• referencehttps://support.microsoft.com/help/5002099
• patchhttps://www.microsoft.com/downloads/details.aspx?familyid=ad2aebaf-7775-465c-8af4-7be5beeccc55
• referencehttps://support.microsoft.com/help/5002104
• patchhttps://www.microsoft.com/downloads/details.aspx?familyid=82284509-af13-4a09-bbdc-00af0505382a
• patchhttps://www.microsoft.com/downloads/details.aspx?familyid=f4e26017-949d-4b0b-9539-ab12dbb285f2