coldbraid

CVE-2021-38646 Microsoft Office

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

CVSS
not scored

On CISA’s exploited list

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Added
2022-03-28
Federal patch deadline
2022-04-18
Ransomware use
known