CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-09-15
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability (CVE-2021-38646) Security Advisory
[Affected Scope] Microsoft Office, Microsoft 365 Apps, and Access Database Engine Redistributable packages
[Impact] Successful exploitation allows an attacker to execute arbitrary remote code (RCE) with the privileges of the active user by tricking them into opening a crafted database file
[Mitigation] Apply the official Microsoft security updates immediately and restrict execution of untrusted database files