CVE Catalog
Actively exploited in the wild
Microsoft Excel Security Feature Bypass
Microsoft - Office · Listed in the CISA KEV since 2021-11-17. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-42292
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk31.95%
98th percentile - higher than 98% of all known CVEs
Summary
Microsoft Excel Security Feature Bypass Vulnerability. Details are not provided in the description, but it allows an attacker to bypass security features.
Risk Assessment
An attacker could exploit this flaw to bypass Excel security, potentially facilitating other attacks such as malicious code execution.
Recommendation
It is recommended to apply patches released by Microsoft for Excel.
Original NVD description (English source)
Microsoft Excel Security Feature Bypass Vulnerability