Firetruck

CVE-2021-42292

KEV
Updated Aug 19, 2026 · PUBLISHED
View KEV entry →

Description

A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft 365 Apps for EnterpriseMicrosoft / Microsoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Excel 2013 Service Pack 1Microsoft / Microsoft Excel 2013 Service Pack 1>= 15.0.0.0, < 15.0.5397.1001affected
Microsoft Excel 2016Microsoft / Microsoft Excel 2016>= 16.0.0.0, < 16.0.5239.1001affected
Microsoft Office 2013 Service Pack 1Microsoft / Microsoft Office 2013 Service Pack 1>= 15.0.0, < 15.0.5397.1001affected
Microsoft Office 2016Microsoft / Microsoft Office 2016>= 16.0.0, < 16.0.5239.1001affected
Microsoft Office 2019Microsoft / Microsoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Office 2019 for MacMicrosoft / Microsoft Office 2019 for Mac>= 16.0.0, < 16.55.21111400affected
Microsoft Office LTSC 2021Microsoft / Microsoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Office LTSC for Mac 2021Microsoft / Microsoft Office LTSC for Mac 2021>= 16.0.1, < 16.55.21111400affected