Microsoft fixes multiple remote code execution vulnerabilities in Office products
The Microsoft Office team has already released the latest security update to users. This security update fixes security vulnerabilities in multiple office software components.
According to the security bulletin, the most common security vulnerabilities repaired this time are remote code execution and escalate privileges vulnerabilities, and all vulnerabilities are of severity level.
If you use Windows 10 and do not disable automatic updates, the system should have installed such security updates at this time, which can be viewed in the update log.
This update also solves the problem of Excel crashing caused by operating system security settings. If you encounter some components crashing, you need to install the update in time.
Overview of security vulnerabilities in this update:
Tag | CVE ID | CVE Title | Severity |
Microsoft Office | CVE-2021-1713 | Microsoft Excel Remote Code Execution Vulnerability | Important |
Microsoft Office | CVE-2021-1714 | Microsoft Excel Remote Code Execution Vulnerability | Important |
Microsoft Office | CVE-2021-1711 | Microsoft Office Remote Code Execution Vulnerability | Important |
Microsoft Office | CVE-2021-1715 | Microsoft Word Remote Code Execution Vulnerability | Important |
Microsoft Office | CVE-2021-1716 | Microsoft Word Remote Code Execution Vulnerability | Important |
Microsoft Office SharePoint | CVE-2021-1712 | Microsoft SharePoint Elevation of Privilege Vulnerability | Important |
Microsoft Office SharePoint | CVE-2021-1707 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
Microsoft Office SharePoint | CVE-2021-1718 | Microsoft SharePoint Server Tampering Vulnerability | Important |
Microsoft Office SharePoint | CVE-2021-1717 | Microsoft SharePoint Spoofing Vulnerability | Important |
Microsoft Office SharePoint | CVE-2021-1719 | Microsoft SharePoint Elevation of Privilege Vulnerability | Important |
Microsoft Office SharePoint | CVE-2021-1641 | Microsoft SharePoint Spoofing Vulnerability | Important |
Via: bleepingcomputer