CVE-2021-28454

HIGH7.8

JSON export Create alert

Description

Microsoft Excel Remote Code Execution Vulnerability

CVSS breakdown

CVSS 3.1

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

E

Physical

RL

O

RC

Changed

Affected products

microsoft / 365_apps
microsoft / Excel2013 – 2013
microsoft / Excel2013 – 2013
microsoft / Excel2010 – 2010
microsoft / Excel2016 – 2016
microsoft / Excel2013 – 2013
microsoft / Excel2016 – 2016
microsoft / office2019 – 2019
microsoft / office2016 – 2016
microsoft / office2016 – 2016
microsoft / office2013 – 2013
microsoft / office2013 – 2013
microsoft / office2013 – 2013
microsoft / Office Online Server
microsoft / office_web_apps_server2013 – 2013

References

VENDOR_ADVISORYhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28454
VENDOR_ADVISORYhttps://www.zerodayinitiative.com/advisories/ZDI-21-410/

Updated 45m ago · 8 sources