CVE-2021-34452: Microsoft Word Remote Code Execution Vulnerability
Published Jul 13, 2021
·Updated
Microsoft Word Remote Code Execution Vulnerability
Affected Software
10 affected componentsFixes available
Microsoft 365 Apps
Microsoft Office=2019
Microsoft Word=2016
Microsoft Word=2019
Microsoft 365 Apps for Enterprise<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft 365 Apps for Enterprise<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Word 2016<16.0.5188.1000
16.0.5188.1000
Microsoft Word 2016<16.0.5188.1000
16.0.5188.1000
Microsoft Office 2019 for 64-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office 2019 for 32-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.5188.1000Patch KB5001949
Event History
Jul 13, 2021
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
Jul 16, 2021
CVE Published
via MITRE·08:19 PM
Data Sourced
via MITRE·08:19 PM
DescriptionSeverity
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-34452?
CVE-2021-34452 is a Microsoft Word Remote Code Execution Vulnerability.
2
How severe is CVE-2021-34452?
CVE-2021-34452 has a severity rating of 7.8 (high).
3
Which software is affected by CVE-2021-34452?
Microsoft Office LTSC for Mac 2021, Microsoft Word 2016, and Microsoft Word 2019 are affected by CVE-2021-34452.
4
How does CVE-2021-34452 occur?
CVE-2021-34452 allows remote code execution in Microsoft Word.
5
How can I fix CVE-2021-34452?
Apply the latest security updates provided by Microsoft to fix CVE-2021-34452.