Description of the security update for Office 2013: May 11, 2021 (KB5001927)

🗓️ 11 May 2021 07:00:00Reported by MicrosoftType

Security update resolving Microsoft Excel and Office disclosure vulnerabilities. Requires Service Pack 1 for Office 2013. Available via Microsoft Update, Catalog, or Download Center. Replaces security update 4504727

Reporter	Title	Published	Views	Family All 62
BDU FSTEC	The vulnerability of Microsoft Office Web Apps Server, Microsoft Office, Office Online Server, and Microsoft Excel stems from improper code generation management, allowing attackers to execute arbitrary code.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages and Microsoft Office Web Apps lies in the lack of protection for sensitive data, allowing attackers to disclose protected information.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages and Microsoft Office Web Apps arises from improper code generation management, allowing an attacker to execute arbitrary code.	26 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages and Microsoft Office Web Apps arises from the possibility of writing operations beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.	26 May 202100:00	–	bdu_fstec
Circl	CVE-2021-31174	8 Jun 202115:15	–	circl
Circl	CVE-2021-31178	8 Jun 202115:15	–	circl
Circl	CVE-2021-31179	8 Jun 202115:15	–	circl
CNNVD	Microsoft Excel 数字错误漏洞	11 May 202100:00	–	cnnvd
CNNVD	Microsoft Office 代码注入漏洞	11 May 202100:00	–	cnnvd
CNNVD	Microsoft Office 资源管理错误漏洞	11 May 202100:00	–	cnnvd

11 May 2021 07:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.8

CVSS 3.17.8

EPSS0.16012