CVE-2021-42292HIGH
Microsoft Excel Security Feature Bypass Vulnerability
AV AC PR UI S C I A CVSS EPSS %ile KEV L L N R U H H H 7.8 .3195 98.2 YES
AFFECTED Product Versions Fixed Microsoft 365 Apps for Enterprise 16.0.1 – — Microsoft Excel 2013 Service Pack 1 15.0.0.0 – — Microsoft Excel 2016 16.0.0.0 – — Microsoft Office 2013 Service Pack 1 15.0.0 – — Microsoft Office 2016 16.0.0 – — Microsoft Office 2019 19.0.0 – — Microsoft Office 2019 for Mac 16.0.0 – — Microsoft Office LTSC 2021 16.0.1 – — Microsoft Office LTSC for Mac 2021 16.0.1 – —
TIMELINE Oct 12 Reserved by microsoft Nov 17 Added to CISA KEV, remediation due 2021-12-01 Nov 17 Published (CNA: microsoft)
CNA: microsoft · CVSS v3.1 · 3 references · KEV due December 1, 2021