CVE-2021-42296: Microsoft Word Remote Code Execution Vulnerability
Published Nov 9, 2021
·Updated
Microsoft Word Remote Code Execution Vulnerability
Affected Software
10 affected componentsFixes available
Microsoft 365 Apps
Microsoft 365 Apps
Microsoft Office=2021
Microsoft Office=2021
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office LTSC 2021 for 32-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft 365 Apps for Enterprise<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft 365 Apps for Enterprise<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC 2021 for 64-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases
Event History
Nov 9, 2021
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
Description
Nov 10, 2021
CVE Published
via MITRE·12:47 AM
Data Sourced
via MITRE·12:47 AM
DescriptionSeverity
Data Sourced
via NVD·01:19 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-42296?
CVE-2021-42296 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2021-42296?
To fix CVE-2021-42296, users should apply the latest security updates provided by Microsoft for affected software.
3
Which software is affected by CVE-2021-42296?
CVE-2021-42296 affects Microsoft 365 Apps and Microsoft Office 2021 on both x64 and x86 architectures.
4
What type of vulnerability is CVE-2021-42296?
CVE-2021-42296 is classified as a remote code execution vulnerability in Microsoft Word.
5
Can CVE-2021-42296 be exploited remotely?
Yes, CVE-2021-42296 can be exploited remotely, allowing attackers to execute arbitrary code on vulnerable systems.