CVE-2021-28456: Microsoft Excel Information Disclosure Vulnerability

Published Apr 13, 2021

Updated

Microsoft Excel Information Disclosure Vulnerability

Affected Software

9 affected components

Microsoft 365 Apps

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Office=2019

Microsoft Office Macos=2019

Microsoft Office Online Server

Microsoft Office Web Apps Server=2013-sp1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28456

Event History

Apr 13, 2021

CVE Published

07:33 PM

Data Sourced

07:33 PM

DescriptionSeverity

Data Sourced

via NVD·08:15 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2021-28456?

CVE-2021-28456 is a vulnerability in Microsoft Excel that allows for information disclosure.

How severe is CVE-2021-28456?

CVE-2021-28456 has a severity score of 5.5, which is considered medium.

Which software versions are affected by CVE-2021-28456?

Microsoft Office LTSC for Mac 2021, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2019, Microsoft Office Online Server, and Microsoft Office Web Apps Server 2013 SP1 are affected by CVE-2021-28456.

How can I fix CVE-2021-28456?

To fix CVE-2021-28456, it is recommended to apply the latest security updates provided by Microsoft.

Where can I find more information about CVE-2021-28456?

For more information about CVE-2021-28456, you can visit the Microsoft Security Advisory at [https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28456](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28456).