Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-28455, CVE-2021-31175, CVE-2021-31176, CVE-2021-31177,     CVE-2021-31179, CVE-2021-31180)

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive     information. (CVE-2021-31174, CVE-2021-31178)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5003209.
It is, therefore, affected by multiple vulnerabilities

ID	Name	Product	Family	Severity
162095	Security Updates for Microsoft Office Products C2R (May 2021)	Nessus	Windows	high
149440	KB5003208: Windows Server 2012 Security Update (May 2021)	Nessus	Windows : Microsoft Bulletins	critical
149401	Security Updates for Microsoft Office Products (May 2021)	Nessus	Windows : Microsoft Bulletins	high
149398	KB5003173: Windows 10 version 2004 / Windows 10 version 20H2 Security Update (May 2021)	Nessus	Windows : Microsoft Bulletins	critical
149396	KB5003172: Windows 10 version 1507 LTS Security Update (May 2021)	Nessus	Windows : Microsoft Bulletins	critical
149394	KB5003209: Windows 8.1 and Windows Server 2012 R2 Security Update (May 2021)	Nessus	Windows : Microsoft Bulletins	critical
149392	KB5003233: Windows 7 and Windows Server 2008 R2 Security Update (May 2021)	Nessus	Windows : Microsoft Bulletins	critical
149391	KB5003174: Windows 10 version 1803 Security Update (May 2021)	Nessus	Windows : Microsoft Bulletins	critical
149390	KB5003197: Windows 10 1607 / Windows Server 2016 Security Update (May 2021)	Nessus	Windows : Microsoft Bulletins	critical
149389	KB5003210: Windows Server 2008 Security Update (May 2021)	Nessus	Windows : Microsoft Bulletins	critical
149383	KB5003169: Windows 10 version 1909 Security Update (May 2021)	Nessus	Windows : Microsoft Bulletins	critical
149382	KB5003171: Windows 10 version 1809 / Windows Server 2019 Security Update (May 2021)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2021-28455

high

Tenable Plugins

high

critical

high

critical

critical

critical

critical

critical

critical

critical

critical

critical