Description of the security update for Office 2016: May 11, 2021 (KB5001923)

🗓️ 11 May 2021 07:00:00Reported by MicrosoftType

Security Update for Office 2016: May 11, 2021 resolves Excel remote code execution and Office information disclosure vulnerabilities. Must have Microsoft Office 2016 release version installed to apply update

Reporter	Title	Published	Views	Family All 62
BDU FSTEC	The vulnerability of Microsoft Office Web Apps Server, Microsoft Office, Office Online Server, and Microsoft Excel stems from improper code generation management, allowing attackers to execute arbitrary code.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages and Microsoft Office Web Apps lies in the lack of protection for sensitive data, allowing attackers to disclose protected information.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages and Microsoft Office Web Apps arises from improper code generation management, allowing an attacker to execute arbitrary code.	26 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages and Microsoft Office Web Apps arises from the possibility of writing operations beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.	26 May 202100:00	–	bdu_fstec
Circl	CVE-2021-31174	8 Jun 202115:15	–	circl
Circl	CVE-2021-31178	8 Jun 202115:15	–	circl
Circl	CVE-2021-31179	8 Jun 202115:15	–	circl
CNNVD	Microsoft Excel 数字错误漏洞	11 May 202100:00	–	cnnvd
CNNVD	Microsoft Office 代码注入漏洞	11 May 202100:00	–	cnnvd
CNNVD	Microsoft Office 资源管理错误漏洞	11 May 202100:00	–	cnnvd

11 May 2021 07:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.8

CVSS 3.17.8

EPSS0.16012