Microsoft Office App Remote Code Execution Vulnerability

Microsoft Office App Remote Code Execution Vulnerability

A critical* Microsoft Office App Remote Code Execution Vulnerability with a CVSS 3.1 score of 9.6 was released.

Even though no exploit regarding this vulnerability has been discovered, due to its severity/criticality, it is highly recommended that the following patches are downloaded to ensure the safety of systems/assets.

Affected Systems

The following systems/products are affected by this vulnerability;

• Office app

IoC’s

-

Recommended Solution(s)

Organizations using the following product(s) are recommended to download the patch(es) in the table below.

CVE / CWE

CVE-2021-43905

Related Website(s)

• https://nvd.nist.gov/vuln/detail/CVE-2021-43905
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43905

* Vulnerabilities with a CVSS 3.1 score between 7.0 and 8.9 are evaluated to be “high” whereas vulnerabilities with a CVSS 3.1 score between 9.0 and 10.0 are evaluated to be “critical”.