CVE-2021-43905

4 documents4 sources
Severity
9.6CRITICAL
EPSS
0.4%
top 41.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Office APPMicrosoft 365 Copilot
Timeline
PublishedDec 15
Latest updateDec 16

Description

Microsoft Office app Remote Code Execution Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HExploitability: 2.8 | Impact: 6.0

Affected Packages2 packages

▶CVEListV5microsoft/office_app< publication
▶NVDmicrosoft/365_copilot< 18.2110.13110.0

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p5c8-x5qh-v2mv: Microsoft Office app Remote Code Execution Vulnerability↗2021-12-16
▶
CVEList
Microsoft Office app Remote Code Execution Vulnerability↗2021-12-15
▶

📋Vendor Advisories

1
Microsoft
Microsoft Office app Remote Code Execution Vulnerability↗2021-12-14
▶
CVE-2021-43905 (CRITICAL CVSS 9.6) | Microsoft Office app Remote Code Ex | cvebase.io