Exploitation Summary
CVE-2021-42292 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 17, 2021. EIP tracks 1 public exploit from researchers including corelight.
AI-analyzed exploit summary This repository provides detection logic for CVE-2021-42292, a Microsoft Excel local privilege escalation vulnerability. It includes Zeek scripts and Suricata rules to detect exploitation attempts by monitoring Excel downloading secondary spreadsheets with elevated privileges.
Description
Microsoft Excel Security Feature Bypass Vulnerability
Exploits (1)
This repository provides detection logic for CVE-2021-42292, a Microsoft Excel local privilege escalation vulnerability. It includes Zeek scripts and Suricata rules to detect exploitation attempts by monitoring Excel downloading secondary spreadsheets with elevated privileges.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H