Description of the security update for Office Online Server: April 13, 2021 (KB4504714)

🗓️ 13 Apr 2021 07:00:00Reported by MicrosoftType

Security update for Office Online Server resolves remote code execution and information disclosure vulnerabilities. Available via Microsoft Update, Catalog, and Download Center

Reporter	Title	Published	Views	Family All 97
BDU FSTEC	The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages lies in errors related to code generation, allowing an attacker to execute arbitrary code.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word’s text editor, related to errors in code generation, allows a hacker to execute arbitrary code.	23 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects implementations of syntactic analysis for XLS file formats in programs from Microsoft Office, Microsoft Office Web Apps Server, Microsoft Excel, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server. This allows attackers to execute arbitrary code.	27 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft Office Web Apps Server, Microsoft Excel, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server relates to insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.	27 Apr 202100:00	–	bdu_fstec
CNNVD	Microsoft Excel 信息泄露漏洞	13 Apr 202100:00	–	cnnvd
CNNVD	Microsoft Word 代码注入漏洞	13 Apr 202100:00	–	cnnvd
CNNVD	Microsoft Excel 资源管理错误漏洞	13 Apr 202100:00	–	cnnvd
CNNVD	Microsoft Excel 代码注入漏洞	13 Apr 202100:00	–	cnnvd
CNVD	Microsoft Excel Information Disclosure Vulnerability (CNVD-2021-29996)	14 Apr 202100:00	–	cnvd
CNVD	Microsoft Excel Code Execution Vulnerability (CNVD-2021-35511)	14 Apr 202100:00	–	cnvd

13 Apr 2021 07:00Current

7.3High risk

Vulners AI Score7.3

CVSS 26.8

CVSS 3.17.8

EPSS0.04068