CVE-2021-38646: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Published Sep 14, 2021
·Updated
Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.
Other sources
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Affected Software
19 affected componentsFixes available
Microsoft Office
Microsoft 365 Apps
Microsoft Office=2013-sp1
Microsoft Office=2013-sp1
Microsoft Office=2016
Microsoft Office=2019
Microsoft Office 2013 RT<5381.1000
5381.1000
Microsoft Office 2016<5215.1000
5215.1000
Microsoft Office 2016<5215.1000
5215.1000
Microsoft 365 Apps for Enterprise<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office 2013<5381.1000
5381.1000
Microsoft Office 2013<5381.1000
5381.1000
Microsoft 365 Apps for Enterprise<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office 2019 for 64-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office 2019 for 32-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office=2013-sp1
Microsoft Office 2016
Microsoft Office 2016
Microsoft Office 2019
Remediation
Event History
Sep 14, 2021
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
Sep 15, 2021
CVE Published
via MITRE·11:24 AM
Data Sourced
via MITRE·11:24 AM
DescriptionSeverity
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityAffected Software
Mar 28, 2022
Known Exploited
via CISA·12:00 AM
Known Ransomware
via CISA·12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2021-38646?
CVE-2021-38646 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2021-38646?
To fix CVE-2021-38646, update your Microsoft Office or Microsoft 365 Apps to the latest version provided by Microsoft.
3
Which versions of software are affected by CVE-2021-38646?
CVE-2021-38646 affects Microsoft Office versions 2013 SP1, 2016, 2019, and Microsoft 365 Apps.
4
What could happen if CVE-2021-38646 is exploited?
If exploited, CVE-2021-38646 could allow an attacker to execute arbitrary code on the affected system.
5
How can I check if I am vulnerable to CVE-2021-38646?
Check your installed version of Microsoft Office or Microsoft 365 Apps against the versions affected by CVE-2021-38646.