Vulnerability Details CVE-2021-38646
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Exploit prediction scoring system (EPSS) score
EPSS Score 0.363
EPSS Ranking 96.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
Proposed Action
Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.
Ransomware Campaign
Known
References
Products affected by CVE-2021-38646
-
cpe:2.3:a:microsoft:365_apps:-
-
cpe:2.3:a:microsoft:office:2013
-
cpe:2.3:a:microsoft:office:2016
-
cpe:2.3:a:microsoft:office:2019