CVSS: 5.5EPSS: 0%CPEs: 11EXPL: 0CVE-2021-43255 – Microsoft Office Trust Center Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2021-43255
Microsoft Office Trust Center Spoofing Vulnerability Una vulnerabilidad de Suplantación de Identidad de Microsoft Office Trust Center • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43255 •
CVSS: 5.5EPSS: 0%CPEs: 11EXPL: 0CVE-2021-42295 – Visual Basic for Applications Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-42295
Visual Basic for Applications Information Disclosure Vulnerability Una vulnerabilidad de Divulgación de Información de Visual Basic for Applications • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42295 •
CVSS: 6.5EPSS: 0%CPEs: 11EXPL: 0CVE-2021-42293 – Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-42293
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Microsoft Jet Red Database Engine and Access Connectivity • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42293 •
CVSS: 7.8EPSS: 5%CPEs: 10EXPL: 1CVE-2021-42292 – Microsoft Excel Security Feature Bypass
https://notcve.org/view.php?id=CVE-2021-42292
Microsoft Excel Security Feature Bypass Vulnerability Una vulnerabilidad de Omisión de Funcionalidades de Seguridad de Microsoft Excel A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution. • https://github.com/corelight/CVE-2021-42292 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42292 •
CVSS: 7.8EPSS: 1%CPEs: 6EXPL: 0CVE-2021-41368 – Microsoft Access Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-41368
Microsoft Access Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Microsoft Access This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Access. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ACCDB database files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41368 https://www.zerodayinitiative.com/advisories/ZDI-21-1309 •