HIGH

CVE-2021-42292

Microsoft 365 Apps 2021-11-10 CVSS v3.1

CVSS

7.8

KEV

Description

Microsoft Excel Security Feature Bypass Vulnerability

Summary dbcve.org

Insufficient technical details provided in the vulnerability description to write a reliable summary. Only known: this is a Microsoft Excel security feature bypass with CVSS 7.8 (HIGH).

Mitigation

Apply Microsoft security patches for CVE-2021-42292 immediately. Until patched, restrict Excel file execution from untrusted sources and monitor for anomalous Office document behavior.

Patch Commit

EPSS Score

43.01%

Probability of exploitation in next 30 days

98.7th percentile

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42292 Patch, Vendor Advisory https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42292 Patch, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42292 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE