CyberSec.Space Logo
Back to CVE Browser

CVE-2021-42292

🔥 Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score70.5260%
EPSS Percentile98.68th
Published2021-11-10
Last Modified2025-10-30
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Microsoft Excel Security Feature Bypass Vulnerability

Affected Platforms (CPE)

📦
Microsoft

365 Apps

All versions
📦
Microsoft

Excel

= 2013
📦
Microsoft

Office

= 2013= 2016= 2019
📦
Microsoft

Office Long Term Servicing Channel

= 2021

References & Advisories

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42292
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42292
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42292

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 29, 2026

Today’s threat intelligence covers active exploitation of Arista VeloCloud CVE-2026-16812, unauthenticated TeamCity RCE CVE-2026-63077, exposed IPMI/BMC password risks, and the Origin Energy and MCBS breach updates.

2026-07-29

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

2026-07-27

Daily Global Cyber Threat Intelligence Digest — July 28, 2026

Today’s threat intelligence covers the Certighost CVE-2026-54121 AD CS domain-takeover chain, vBulletin CVE-2026-61511 pre-auth RCE, the expanding Dysphoria botnet, and the DentaQuest and Fairlife breach updates.

2026-07-28

Related Vulnerabilities

CVE-2026-137236.5

A vulnerability in the `zipx.Unzip` extraction routine of Develar's app-builder allows an attacker to overwrite arbitrary files on...

CVE-2026-165816.9

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability co...

CVE-2026-149739.3

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected do...

CVE-2026-1175610.0

A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENC...