Office 2021 vulnerabilities
7 known vulnerabilities in Office 2021 from Microsoft. 6 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 6.5 Medium severity
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Exploited
Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
- 7.8 High severity
Microsoft 365 Apps for Enterprise: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.
- 8.8 High severity
Microsoft 365 Apps for Enterprise: Access of Resource Using Incompatible Type
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- 7.8 High severity
Microsoft 365 Apps for Enterprise: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.
- 7.0 High severity
Microsoft 365 Apps for Enterprise: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 7.5 High severity
Microsoft Outlook Security Feature Bypass Exploited
Microsoft Outlook Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Excel Security Feature Bypass Exploited
Microsoft Excel Security Feature Bypass Vulnerability