CVE-2021-42292— Microsoft Excel 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2021-42292の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Microsoft Excel Security Feature Bypass Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
Microsoft Excel Security Feature Bypass Vulnerability
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Microsoft Excel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Microsoft Excel是美国微软（Microsoft）公司的一款Office套件中的电子表格处理软件。 Microsoft Excel 存在安全漏洞。以下产品和版本受到影响：Microsoft Excel 2016 (32-bit edition),Microsoft Excel 2016 (64-bit edition),Microsoft Office 2016 (32-bit edition),Microsoft Office 2016 (64-bit edition),Microsoft
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Microsoft | Microsoft Office 2019 | 19.0.0 ~ https://aka.ms/OfficeSecurityReleases | cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:* | |
| Microsoft | Microsoft Office 2019 for Mac | 16.0.0 ~ 16.55.21111400 | cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:* | |
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1 ~ https://aka.ms/OfficeSecurityReleases | cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:* | |
| Microsoft | Microsoft Office LTSC for Mac 2021 | 16.0.1 ~ 16.55.21111400 | cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:* | |
| Microsoft | Microsoft Office LTSC 2021 | 16.0.1 ~ https://aka.ms/OfficeSecurityReleases | cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:* | |
| Microsoft | Microsoft Excel 2016 | 16.0.0.0 ~ 16.0.5239.1001 | cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:* | |
| Microsoft | Microsoft Office 2016 | 16.0.0 ~ 16.0.5239.1001 | cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:* | |
| Microsoft | Microsoft Excel 2013 Service Pack 1 | 15.0.0.0 ~ 15.0.5397.1001 | cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:* | |
| Microsoft | Microsoft Office 2013 Service Pack 1 | 15.0.0 ~ 15.0.5397.1001 | cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:* |
II. CVE-2021-42292の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|---|---|---|
| 1 | A Zeek package to detect CVE-2021-42292, a Microsoft Excel local privilege escalation exploit. | https://github.com/corelight/CVE-2021-42292 | POC詳細 |
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2021-42292のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Microsoft · 2021-11-10 · 54 CVEs total
| CVE-2021-26443 | 9.0 CRITICAL | Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability |
| CVE-2021-38666 | 8.8 HIGH | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2021-42321 | 8.8 HIGH | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-42316 | 8.8 HIGH | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
| CVE-2021-42283 | 8.8 HIGH | NTFS Elevation of Privilege Vulnerability |
| CVE-2021-42275 | 8.8 HIGH | Microsoft COM for Windows Remote Code Execution Vulnerability |
| CVE-2021-43209 | 7.8 HIGH | 3D Viewer Remote Code Execution Vulnerability |
| CVE-2021-43208 | 7.8 HIGH | 3D Viewer Remote Code Execution Vulnerability |
| CVE-2021-42296 | 7.8 HIGH | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2021-42322 | 7.8 HIGH | Visual Studio Code Elevation of Privilege Vulnerability |
| CVE-2021-42286 | 7.8 HIGH | Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege |
| CVE-2021-42285 | 7.8 HIGH | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2021-42276 | 7.8 HIGH | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2021-41378 | 7.8 HIGH | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2021-41377 | 7.8 HIGH | Windows Fast FAT File System Driver Elevation of Privilege Vulnerability |
| CVE-2021-41370 | 7.8 HIGH | NTFS Elevation of Privilege Vulnerability |
| CVE-2021-41367 | 7.8 HIGH | NTFS Elevation of Privilege Vulnerability |
| CVE-2021-41366 | 7.8 HIGH | Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerabili |
| CVE-2021-40442 | 7.8 HIGH | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2021-36957 | 7.8 HIGH | Windows Desktop Bridge Elevation of Privilege Vulnerability |
Showing 20 of 54 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Microsoft Office 2019
- CVE-2024-49142
Microsoft Access Remote Code Execution Vulnerability - CVE-2024-49069
Microsoft Excel Remote Code Execution Vulnerability - CVE-2024-49059
Microsoft Office Elevation of Privilege Vulnerability - CVE-2024-49026
Microsoft Excel Remote Code Execution Vulnerability - CVE-2024-49027
Microsoft Excel Remote Code Execution Vulnerability
同じベンダー: Microsoft
- CVE-2026-42826
Azure DevOps Information Disclosure Vulnerability - CVE-2026-35428
Azure Cloud Shell Spoofing Vulnerability - CVE-2026-35435
Azure AI Foundry Elevation of Privilege Vulnerability - CVE-2026-34327
Microsoft Partner Center Spoofing Vulnerability - CVE-2026-33844
Azure Managed Instance for Apache Cassandra Remote Code Exec
V. CVE-2021-42292へのコメント
まだコメントはありません