Microsoft Office Excel 2019/365 ConditionalFormatting code execution vulnerability

🗓️ 12 Oct 2021 00:00:00Reported by Talos IntelligenceType

talos🔗 www.talosintelligence.com👁 68 Views

Microsoft Office Excel 2019/365 ConditionalFormatting code execution vulnerability. October 12, 2021. CVE-2021-40474. Vulnerability found in Excel for spreadsheets due to a code execution vulnerability in ConditionalFormatting

Reporter	Title	Published	Views	Family All 26
BDU FSTEC	The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft 365 Apps for Enterprise programs relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.	11 Nov 202100:00	–	bdu_fstec
CNNVD	Microsoft Excel 代码注入漏洞	12 Oct 202100:00	–	cnnvd
CVE	CVE-2021-40474	13 Oct 202100:27	–	cve
Cvelist	CVE-2021-40474 Microsoft Excel Remote Code Execution Vulnerability	13 Oct 202100:27	–	cvelist
EUVD	EUVD-2021-27651	3 Oct 202520:07	–	euvd
Microsoft KB	Description of the security update for Office Online Server: October 12, 2021 (KB5002027)	12 Oct 202107:00	–	mskb
Microsoft KB	Description of the security update for Excel 2016: October 12, 2021 (KB5002030)	12 Oct 202107:00	–	mskb
Microsoft KB	Description of the security update for Office Web Apps Server 2013: October 12, 2021 (KB5002036)	12 Oct 202107:00	–	mskb
Microsoft KB	Description of the security update for Excel 2013: October 12, 2021 (KB5002043)	12 Oct 202107:00	–	mskb
Kaspersky	KLA12316 Multiple vulnerabilities in Microsoft Office	12 Oct 202100:00	–	kaspersky

12 Oct 2021 00:00Current

0.6Low risk

Vulners AI Score0.6

CVSS 26.8

CVSS 3.17.8

EPSS0.0534