Actively exploited in the wild
Microsoft Excel Security Feature Bypass
Microsoft - Office · Listed in the CISA KEV since 2021-11-17. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-42292
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
Microsoft Excel Security Feature Bypass Vulnerability. Details are not provided in the description, but it allows an attacker to bypass security features.
Risk Assessment
An attacker could exploit this flaw to bypass Excel security, potentially facilitating other attacks such as malicious code execution.
Recommendation
It is recommended to apply patches released by Microsoft for Excel.
Other vulnerabilities in Microsoft Excel
See all- CVE-2024-26257High
A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to execute malicious code on the compromised device.
- CVE-2023-23398High
A vulnerability in Microsoft Excel allows for spoofing, which may lead to unauthorized access to user data. An attacker can exploit this flaw to mislead the user into opening a malicious file.
- CVE-2022-29109High
A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to run malicious software on the infected device.
- CVE-2022-26901High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2022-24473High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2022-21841High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2021-43256High
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2023-33133High
A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw through malicious Excel files.
- CVE-2021-38655High
Vulnerability in Microsoft Excel allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
- CVE-2021-34501High
Microsoft Excel Remote Code Execution Vulnerability. Details not available in the description.
Original NVD description (English source)
Microsoft Excel Security Feature Bypass Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS