Lucene search

CVE-2021-41368

🗓️ 10 Nov 2021 01:29:19Reported by microsoftType

Microsoft Access Remote Code Execution Vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 13
Cvelist	CVE-2021-41368 Microsoft Access Remote Code Execution Vulnerability	10 Nov 202100:46	–	cvelist
Microsoft CVE	Microsoft Access Remote Code Execution Vulnerability	9 Nov 202108:00	–	mscve
Microsoft KB	Description of the security update for Office 2013: November 9, 2021 (KB5002038)	9 Nov 202108:00	–	mskb
Microsoft KB	Description of the security update for Office 2016: November 9, 2021 (KB5002032)	9 Nov 202108:00	–	mskb
Prion	Remote code execution	10 Nov 202101:19	–	prion
NVD	CVE-2021-41368	10 Nov 202101:19	–	nvd
Vulnrichment	CVE-2021-41368 Microsoft Access Remote Code Execution Vulnerability	10 Nov 202100:46	–	vulnrichment
Zero Day Initiative	Microsoft Access ACCDB File Parsing Use-After-Free Remote Code Execution Vulnerability	11 Nov 202100:00	–	zdi
OpenVAS	Microsoft Office 2013 Service Pack 1 RCE Vulnerability (KB5002038)	10 Nov 202100:00	–	openvas
OpenVAS	Microsoft Office 2016 RCE Vulnerability (KB5002032)	10 Nov 202100:00	–	openvas

Nvd

Vulners

Node

microsoft 365_appsMatch-enterprise

microsoft officeMatch2013sp1

microsoft officeMatch2013sp1rt

microsoft officeMatch2016---

microsoft officeMatch2019

microsoft office_long_term_servicing_channelMatch2021

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office LTSC 2021",
    "cpes": [
      "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems",
      "32-bit Systems"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office 2019",
    "cpes": [
      "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "19.0.0",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft 365 Apps for Enterprise",
    "cpes": [
      "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*"
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office 2016",
    "cpes": [
      "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*",
      "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*"
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.5239.1001",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office 2013 Service Pack 1",
    "cpes": [
      "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
      "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*",
      "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*"
    ],
    "platforms": [
      "ARM64-based Systems",
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.0.0",
        "lessThan": "15.0.5397.1001",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1309/
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41368

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Nov 2021 01:19Current

6.5Medium risk

Vulners AI Score6.5

CVSS26.8

CVSS36.1

EPSS0.01193

SSVC