CVE-2021-38646

HIGH KEV RANSOMWARE

Microsoft Office Access Connectivity Engine - RCE

Title source: llm

Exploitation Summary

CVE-2021-38646 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 28, 2022, with confirmed use in ransomware campaigns.

Description

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38646

US Government Resource

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38646

Scores

CVSS v3 7.8

EPSS 0.5093

EPSS Percentile 97.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation active

Automatable no

Technical Impact total

Details

CISA KEV 2022-03-28

VulnCheck KEV 2022-03-28

InTheWild.io 2021-10-25

ENISA EUVD EUVD-2021-25085

Ransomware Use Confirmed

Status published

Products (4)

microsoft/365_apps

microsoft/office 2013 sp1 (2 CPE variants)

microsoft/office 2016

microsoft/office 2019

Published Sep 15, 2021

KEV Added Mar 28, 2022

Tracked Since Feb 18, 2026