CVE-2021-42292

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7.8EPSS 43%

Published 2021-11-10Updated 2026-08-19

Exploited in the wildPatch

Vulnerability details

Microsoft Excel Security Feature Bypass Vulnerability

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

CNAmicrosoft

EPSS score history

Sources

2 links

PoC links are not available for guest users. Login to view them.

CISA Known Exploited CVE Organization

Profile

CVSS

7.8

EPSS

43%

Published

2021-11-10

Updated

2026-08-19

CNA

microsoft

Vendors

Microsoft

9 products

CPEs

cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*

cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*

cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*

cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*

cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*

cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*

cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*

cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*

cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x86:*

cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x64:*

cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*

cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*

cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated