What is CVE-2021-43905?

CVE-2021-43905 is a security advisory published by Microsoft Security Response Center (MSRC) with Critical severity. Microsoft Office app Remote Code Execution Vulnerability

Which CVE IDs does CVE-2021-43905 cover?

CVE-2021-43905 covers the following CVE IDs: CVE-2021-43905. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-43905?

CVE-2021-43905 has a CVSS v3 base score of 9.6, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-43905?

CVE-2021-43905 affects 1 product, including: Office app.

CVE-2021-43905CriticalCVSS 9.6

Microsoft Office app Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

December 14, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-43905 →

📋 Description

How do I get the update for Office app? The Microsoft Store will automatically update affected customers. Alternatively, customers can get the update immediately; see here for details. Be sure to select the tab for the operating system installed on your device to search for updates. It is possible for customers to disable automatic updates for the Microsoft Store. The Microsoft Store will not automatically install this update for those customers. You can get the update through the store here: ms-windows-store://pdp/?productid=9WZDNCRD29V9. How can I check if the update is installed? App versions 18.2110.13110.0 and later contain this update.

Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.

🎯 Affected products1

Office app

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (1)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43905