Microsoft Office和Microsoft Excel 代码注入漏洞

CNNVD-ID编号	CNNVD-202104-858	CVE编号	CVE-2021-28449
发布时间	2021-04-13	更新时间	2021-04-15
漏洞类型	代码注入	漏洞来源	N/A
危险等级	高危	威胁类型	本地
厂商	N/A

漏洞介绍

Microsoft Office和Microsoft Excel都是美国微软（Microsoft）公司的产品。Microsoft Office是一款办公软件套件产品。该产品常用组件包括Word、Excel、Access、Powerpoint、FrontPage等。Microsoft Excel是一款Office套件中的电子表格处理软件。 Microsoft Office 远程执行代码漏洞。以下产品和版本受到影响：Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit editions,Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for 64-bit Systems,Microsoft Excel 2016 (32-bit edition),Microsoft Excel 2016 (64-bit edition),Microsoft Office 2016 (32-bit edition),Microsoft Office 2016 (64-bit edition),Microsoft Excel 2010 Service Pack 2 (32-bit editions),Microsoft Excel 2010 Service Pack 2 (64-bit editions),Microsoft Excel 2013 RT Service Pack 1,Microsoft Excel 2013 Service Pack 1 (32-bit editions),Microsoft Excel 2013 Service Pack 1 (64-bit editions),Microsoft Office 2010 Service Pack 2 (32-bit editions),Microsoft Office 2010 Service Pack 2 (64-bit editions),Microsoft Office 2013 RT Service Pack 1,Microsoft Office 2013 Service Pack 1 (32-bi

漏洞补丁

目前厂商已发布升级了Microsoft Office和Microsoft Excel 代码注入漏洞的补丁，Microsoft Office和Microsoft Excel 代码注入漏洞的补丁获取链接： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28449