Microsoft Access Remote Code Execution Vulnerability

CVE-2021-41368 is a remote code execution vulnerability in Microsoft Office Access (rated Important, CVSS 6.1).

1 version

Microsoft id: CVE-2021-41368
Products: Microsoft Office Access
Severity: Important
Impact: Remote Code Execution
CVSS: 6.1
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C
Exploited: No
Publicly disclosed: No
Exploitability: Exploitation Less Likely
Customer action required: Yes
Release: 2021-Nov
Assigned by: Microsoft
MSRC revision: 1.0
First captured by us: 13 Nov 2026, 14:48 UTC (from our first import of this list)
Microsoft last modified: 9 Nov 2021, 08:00 UTC
Source: Security updates · open the original at Microsoft

Microsoft's revision notes

Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.

Security updates, 08:00 UTC, 9 Nov 2021

One version so far. If Microsoft edits it, each change shows here with what was removed and added.

First version we captured · 14:48 UTC, 13 Nov
The text as we first saw it
Seen by us 14:48 UTC, 13 Nov · Microsoft's timestamp 08:00 UTC, 9 Nov 2021 · Microsoft's page

Last updated 13 Nov 2026, 14:48 UTC