CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-11-10
Microsoft Excel Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2021-42292) Analysis & Mitigation Guide
[Affected Scope] Broad range of Microsoft Office suites including Microsoft Excel 2013, 2016, 2019, 2021, Microsoft 365 Apps, and Office LTSC 2021
[Impact] Attackers can bypass security warnings and Protected View to execute arbitrary code with the user's privileges by tricking them into opening a specially crafted Excel file
[Mitigation] Apply official Microsoft security patches immediately, restrict execution of untrusted email attachments, and enforce strict macro blocking policies