CVE-2021-38646: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.
Other sources
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5381.1000Patch KB5001958 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5215.1000Patch KB5001997
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38646?
CVE-2021-38646 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2021-38646?
To fix CVE-2021-38646, update your Microsoft Office or Microsoft 365 Apps to the latest version provided by Microsoft.
Which versions of software are affected by CVE-2021-38646?
CVE-2021-38646 affects Microsoft Office versions 2013 SP1, 2016, 2019, and Microsoft 365 Apps.
What could happen if CVE-2021-38646 is exploited?
If exploited, CVE-2021-38646 could allow an attacker to execute arbitrary code on the affected system.
How can I check if I am vulnerable to CVE-2021-38646?
Check your installed version of Microsoft Office or Microsoft 365 Apps against the versions affected by CVE-2021-38646.