CVE-2021-42292: Microsoft Excel Security Feature Bypass Vulnerability
A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.
Other sources
Microsoft Excel Security Feature Bypass Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.55.21111400 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.0.5397.1001Patch KB5002035 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.5239.1001Patch KB4486670
Event History
Frequently Asked Questions
What is CVE-2021-42292?
CVE-2021-42292 is a security feature bypass vulnerability in Microsoft Excel.
How does CVE-2021-42292 affect Microsoft Excel?
CVE-2021-42292 allows a local user to perform arbitrary code execution in Microsoft Excel.
What is the severity of CVE-2021-42292?
CVE-2021-42292 has a severity rating of 7.8 (high).
What versions of Microsoft Office are affected by CVE-2021-42292?
Versions of Microsoft Office including 365 Apps, Office 2013 SP1, Office 2016, Office 2019, and Office Long Term Servicing Channel 2021 on both Windows and macOS are affected by CVE-2021-42292.
How can CVE-2021-42292 be fixed?
To mitigate CVE-2021-42292, Microsoft has released security updates. It is recommended to install the latest updates for affected Microsoft Office versions.