CVE-2021-34478high

Microsoft Office Remote Code Execution Vulnerability

33Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 54%

exploitation probability

54%top 1% of all CVEs

observed exploitation

nono source reports it

Microsoft Office Remote Code Execution Vulnerability

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected products

Microsoft · Microsoft 365 Apps for Enterprise Microsoft · Microsoft Office 2019

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34478 https://www.zerodayinitiative.com/advisories/ZDI-21-1024/