CVE Watch10 de ago. de 2026

CVE-2021-38646

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

CVSS

7.8

Alta

EPSS

8.0%

p95

KEV

SIM

28 de mar. de 2022

Exploit Today

0-100

Publicado: 15 de set. de 2021 · Última mod.: 10 de ago. de 2026

EPSS · 30d

8.0%EPSS · 30 dias8.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Office

Vulnerabilidade

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Adicionado ao KEV

28 de mar. de 2022

Corrigir até

18 de abr. de 2022

Uso conhecido em ransomware

Sim

Descrição resumida

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-38646

Descrição técnica

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2023-217157.3 ALT

96.1%

KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability78d CVE-2021-422927.8 ALT

98.7%

KEV—80Microsoft Excel Security Feature Bypass78d CVE-2021-270597.6 ALT

93.4%

KEV—78Microsoft Office Remote Code Execution Vulnerability78d CVE-2017-11882—

100.0%

KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2015-1641—

99.9%

KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2023-23397—

99.9%

KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—