CVE-2021-38646
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVSS
7.8
Alto
EPSS
8.0%
p95
KEV
SÍ
28 mar 2022
Exploit Today
78
0-100
Publicado: 15 sept 2021 · Última mod.: 10 ago 2026
8.0%EPSS · 30 días8.0%
2026-09-172026-10-15
Producto
Microsoft / Office
Vulnerabilidad
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Añadido a KEV
28 mar 2022
Remediar antes de
18 abr 2022
Uso conocido en ransomware
Sí
Descripción resumida
Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-38646
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-217157.3 ALT96.1%
KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability58dCVE-2021-422927.8 ALT98.7%
KEV—80Microsoft Excel Security Feature Bypass57dCVE-2021-270597.6 ALT93.3%
KEV—78Microsoft Office Remote Code Execution Vulnerability57dCVE-2017-11882—100.0%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2015-1641—99.9%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2023-23397—99.9%
KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—