CVE-2021-38655: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.53.21091200 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5381.1000Patch KB5002009 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5381.1000Patch KB5002014 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10378.20000Patch KB5001999 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5215.1000Patch KB5002003
Event History
Frequently Asked Questions
What is CVE-2021-38655?
CVE-2021-38655 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel.
How severe is the CVE-2021-38655 vulnerability?
The severity of the CVE-2021-38655 vulnerability is rated as high, with a severity value of 7.8.
Which software is affected by CVE-2021-38655?
CVE-2021-38655 affects Microsoft Excel versions 2013, 2013-sp1, 2016, Office Web Apps Server 2013, 365 Apps for Enterprise (x86_64 and x86), Office 2019 for 32-bit and 64-bit editions, and Microsoft Office LTSC for Mac 2021.
How can I fix the CVE-2021-38655 vulnerability?
To fix the CVE-2021-38655 vulnerability, apply the necessary patches or updates provided by Microsoft for the affected software versions.
Where can I find more information about CVE-2021-38655?
More information about CVE-2021-38655 can be found on the Microsoft Security Response Center (MSRC) website and the Zero Day Initiative (ZDI) website.