CVE-2021-42292

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Aug 19, 2026

Description

Microsoft Excel Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Nov 10, 2021
Last modified
Aug 19, 2026
Added to CISA KEV
Nov 17, 2021
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-422936.5Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege VulnerabilityCVE-2021-422947.2Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-422955.5Visual Basic for Applications Information Disclosure VulnerabilityCVE-2021-422967.8Microsoft Word Remote Code Execution VulnerabilityCVE-2021-422975.0Windows 10 Update Assistant Elevation of Privilege VulnerabilityCVE-2021-422987.8Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-422995.6Microsoft Surface Pro 3 Security Feature Bypass VulnerabilityCVE-2021-42307.5A vulnerability has been found in Airfield Online and classified as problematic. This vulnerability affects the path /backups/ of the MySQL CVE-2021-423006.0Azure Sphere Tampering VulnerabilityCVE-2021-423013.3Azure RTOS Information Disclosure VulnerabilityCVE-2021-423026.6Azure RTOS Elevation of Privilege VulnerabilityCVE-2021-423036.6Azure RTOS Elevation of Privilege Vulnerability