Advisory 2021-0834 - Microsoft Office Products: Multiple Vulnerabilities
The CTI portal is available at the following address: https://cti-portal.telekom.net/advisories/2021-0834
Date
2021-05-12
State
2021-05-12
Risk*
Damage: MEDIUM-HIGH
Attack Probability: MEDIUM
Attack
A remote anonymous or authenticated or local attacker can exploit multiple vulnerabilities in Microsoft Skype, Microsoft SharePoint Foundation 2013, Microsoft SharePoint Server 2019, Microsoft SharePoint, Microsoft Word 2013, Microsoft Office 2013, Microsoft Office 2013 RT, Microsoft Word 2016, Microsoft 365 Apps, Microsoft Office 2019, Microsoft Office Web Apps Server 2013, Microsoft Excel 2013, Microsoft Office 2016, Microsoft Excel 2016, Microsoft Office Online Server and Microsoft Office 2019 for Mac in order to disclose information, to execute arbitrary code and to perform a Cross-Site-Scripting-Attack.
* The probability of an attack is determined by the attacker's motivation, the necessary expend and the possibilities for an attack. The damage probability is determined by the expend needed to resolute the attack and probable indirecte consequences of an attack for business processes. Telekom Security assumes worst case scenarios.
Copyright © 1999-2026 Deutsche Telekom Security GmbH. All rights reserved. Reproduction and distribution of this publication in any form - even in parts - without prior written permission is forbidden.
The information contained herein has been obtained from sources believed to be reliable and trusted or have been verified. Telekom Security can take liability for completeness, accuracy and correctness only in so far, as gross negligence or intention create liability. Any liability beyond it, in particular possible damages resulting from using or non-usability of the information contained herein, is excluded.