7.8

CVE-2021-38646

Warning

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ 365 Apps Version- SwEditionenterprise
Microsoft ≫ Office Version2013 Updatesp1 SwEdition-
Microsoft ≫ Office Version2013 Updatesp1 SwEditionrt
Microsoft ≫ Office Version2016
Microsoft ≫ Office Version2019

28.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Vulnerability

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 64.94% 0.984
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
secure@microsoft.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H