CVE-2021-38646

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
8.0%
EPSS
95%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

Vendor
Microsoft
Product
Office
Added to KEV
Mar 28, 2022
Remediation due
Apr 18, 2022 (US federal deadline)
Ransomware use
Known
EPSS
8.0% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded