CVE-2021-40442
HighCVSS 7.8Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
Microsoft Excel Remote Code Execution Vulnerability. An attacker could exploit this vulnerability to execute code remotely on the victim's system via a specially crafted Excel file.
Risk Assessment
The risk to the organization is the possibility of executing malicious code by opening a malicious Excel file, leading to system compromise.
Recommendation
It is recommended to update Microsoft Excel to the latest version with security patches and exercise caution when opening files from unknown sources.
Other vulnerabilities in Microsoft Excel
See all- CVE-2024-26257High
A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to execute malicious code on the compromised device.
- CVE-2023-23398High
A vulnerability in Microsoft Excel allows for spoofing, which may lead to unauthorized access to user data. An attacker can exploit this flaw to mislead the user into opening a malicious file.
- CVE-2022-29109High
A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to run malicious software on the infected device.
- CVE-2022-26901High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2022-24473High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2022-21841High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2021-43256High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2023-33133High
A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw through malicious Excel files.
- CVE-2021-42292HighActively exploited
Microsoft Excel Security Feature Bypass Vulnerability. Details are not provided in the description, but it allows an attacker to bypass security features.
- CVE-2021-38655High
Vulnerability in Microsoft Excel allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
Original NVD description (English source)
Microsoft Excel Remote Code Execution Vulnerability