PT-2021-5600

CVE-2021-34452

·

Published

2021-07-13

·

Updated

2024-03-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Microsoft Office versions (affected versions not specified) Microsoft Word versions (affected versions not specified) Microsoft 365 Apps for Enterprise versions (affected versions not specified)
Description The issue is related to insufficient input validation in Microsoft Office, Microsoft Word, and Microsoft 365 Apps for Enterprise, allowing an attacker to execute arbitrary code. This can be exploited by remote attackers, potentially affecting the system.
Recommendations For Microsoft Office, update to a version that includes the fix for this issue. For Microsoft Word, consider disabling any features that rely on external input until a patch is available. For Microsoft 365 Apps for Enterprise, restrict access to any modules that may be vulnerable to remote code execution until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾