Microsoft Word Remote Code Execution Vulnerability
CVE-2021-42296 is a remote code execution vulnerability in Microsoft Office Word (rated Important, CVSS 7.8).
1 version
Facts
- Microsoft id
CVE-2021-42296- Products
- Microsoft Office Word
- Severity
- Important
- Impact
- Remote Code Execution
- CVSS
- 7.8
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Less Likely
- Customer action required
- Yes
- Release
- 2021-Nov
- Assigned by
- Microsoft
- MSRC revision
- 1.0
- Status pages
- Microsoft 365 apps status
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2021-11-09:
Information published.
Microsoft says
Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
The text as we first saw it
Seen by us · Microsoft's timestamp · Microsoft's page
Related changes
Mentioning the same Microsoft ids
Other changes for Microsoft 365 apps
- Microsoft Word Remote Code Execution Vulnerability
- Microsoft Word Remote Code Execution Vulnerability
- Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Excel Remote Code Execution Vulnerability
- Microsoft Office Denial of Service Vulnerability
- Microsoft Excel Information Disclosure Vulnerability
- Microsoft PowerPoint Remote Code Execution Vulnerability