CVE-2021-38646

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Sep 15, 2021
Last modified
Aug 10, 2026
Added to CISA KEV
Mar 28, 2022
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-386479.8Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityCVE-2021-386487.8Open Management Infrastructure Elevation of Privilege VulnerabilityCVE-2021-386497.0Open Management Infrastructure Elevation of Privilege VulnerabilityCVE-2021-386507.6Microsoft Office Spoofing VulnerabilityCVE-2021-386517.6Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-386527.6Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-386537.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2021-386547.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2021-386557.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-386567.8Microsoft Word Remote Code Execution VulnerabilityCVE-2021-386576.1Microsoft Office Graphics Component Information Disclosure VulnerabilityCVE-2021-386587.8Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-38646: High severity, CVSS 7.8 | Vulnix