Rich Text Edit Control Information Disclosure Vulnerability

The Microsoft Office Products are missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-40454, CVE-2021-40472)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-40471,     CVE-2021-40473, CVE-2021-40474, CVE-2021-40479,     CVE-2021-40480, CVE-2021-40481, CVE-2021-40485,     CVE-2021-40486)

The Microsoft Office product installed on the remote host is affected by multiple vulnerabilities, as follows:

  - An information disclosure vulnerability in rich text editing that can be exploited by a low privileged,     local user. (CVE-2021-40454)

  - Remote code execution vulnerabilities in Excel that can be exploited by an unauthenticated user.
    (CVE-2021-40474, CVE-2021-40485)   Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5006674. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5006675. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5006729. It is, therefore, affected by multiple vulnerabilities.

The remote Windows host is missing security update 5006667.
It is, therefore, affected by multiple vulnerabilities:

  - A session spoofing vulnerability exists. An attacker can     exploit this to perform actions with the privileges of     another user. (CVE-2021-36970, CVE-2021-40455)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-36953,     CVE-2021-40463)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2021-40460, CVE-2021-41338)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-26441, CVE-2021-26442, CVE-2021-40443,     CVE-2021-40449, CVE-2021-40450, CVE-2021-40464,     CVE-2021-40466, CVE-2021-40467, CVE-2021-40470,     CVE-2021-40476, CVE-2021-40477, CVE-2021-40478,     CVE-2021-40488, CVE-2021-40489, CVE-2021-41335,     CVE-2021-41339, CVE-2021-41345, CVE-2021-41347)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38662, CVE-2021-38663,     CVE-2021-40454, CVE-2021-40475, CVE-2021-41332,     CVE-2021-41343)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-40461,     CVE-2021-40462, CVE-2021-40465, CVE-2021-41330,     CVE-2021-41331, CVE-2021-41340, CVE-2021-41342)

The remote Windows host is missing security update 5006732. It is, therefore, affected by multiple vulnerabilities.

The remote Windows host is missing security update 5006669.
It is, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-36953,     CVE-2021-40463)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-26441, CVE-2021-26442, CVE-2021-40443,     CVE-2021-40449, CVE-2021-40466, CVE-2021-40467,     CVE-2021-40470, CVE-2021-40476, CVE-2021-40477,     CVE-2021-40478, CVE-2021-40488, CVE-2021-40489,     CVE-2021-41335, CVE-2021-41345, CVE-2021-41347)

  - A session spoofing vulnerability exists. An attacker can     exploit this to perform actions with the privileges of     another user. (CVE-2021-36970, CVE-2021-40455,     CVE-2021-41361)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-40465,     CVE-2021-40469, CVE-2021-41331, CVE-2021-41340,     CVE-2021-41342)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38662, CVE-2021-38663,     CVE-2021-40454, CVE-2021-41332, CVE-2021-41343)

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2021-40460, CVE-2021-41337, CVE-2021-41338)

The remote Windows host is missing security update 5006670.
It is, therefore, affected by multiple vulnerabilities:

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2021-40460, CVE-2021-41338, CVE-2021-41346)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-36953,     CVE-2021-40463)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38662, CVE-2021-38663,     CVE-2021-40454, CVE-2021-40468, CVE-2021-40475,     CVE-2021-41332, CVE-2021-41343)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-26441, CVE-2021-26442, CVE-2021-40443,     CVE-2021-40449, CVE-2021-40450, CVE-2021-40464,     CVE-2021-40466, CVE-2021-40467, CVE-2021-40470,     CVE-2021-40476, CVE-2021-40477, CVE-2021-40478,     CVE-2021-40488, CVE-2021-40489, CVE-2021-41334,     CVE-2021-41335, CVE-2021-41339, CVE-2021-41345,     CVE-2021-41347, CVE-2021-41357)

  - A session spoofing vulnerability exists. An attacker can     exploit this to perform actions with the privileges of     another user. (CVE-2021-36970, CVE-2021-40455)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-40461,     CVE-2021-40462, CVE-2021-40465, CVE-2021-41330,     CVE-2021-41331, CVE-2021-41340, CVE-2021-41342)

The remote Windows host is missing security update 5006699. It is, therefore, affected by multiple vulnerabilities

The remote Windows host is missing security update 5006672.
It is, therefore, affected by multiple vulnerabilities:

  - A security feature bypass vulnerability exists. An     attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising     the integrity of the system/application.
    (CVE-2021-40456, CVE-2021-40460, CVE-2021-41337,     CVE-2021-41338)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-36953,     CVE-2021-40463)

  - A session spoofing vulnerability exists. An attacker can     exploit this to perform actions with the privileges of     another user. (CVE-2021-36970, CVE-2021-40455,     CVE-2021-41361)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-40461,     CVE-2021-40462, CVE-2021-40465, CVE-2021-40469,     CVE-2021-41330, CVE-2021-41331, CVE-2021-41340,     CVE-2021-41342)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-26441, CVE-2021-26442, CVE-2021-40443,     CVE-2021-40449, CVE-2021-40450, CVE-2021-40464,     CVE-2021-40466, CVE-2021-40467, CVE-2021-40470,     CVE-2021-40476, CVE-2021-40477, CVE-2021-40478,     CVE-2021-40488, CVE-2021-40489, CVE-2021-41335,     CVE-2021-41345, CVE-2021-41347)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-38662, CVE-2021-38663,     CVE-2021-40454, CVE-2021-40475, CVE-2021-41332,     CVE-2021-41343)

ID	Name	Product	Family	Severity
162080	Security Updates for Microsoft Office Products C2R (October 2021)	Nessus	Windows	high
154142	Security Updates for Microsoft Office (October 2021) (macOS)	Nessus	MacOS X Local Security Checks	high
154042	KB5006674: Windows 11 Security Update (October 2021)	Nessus	Windows : Microsoft Bulletins	high
154041	KB5006675: WWindows 10 version 1507 LTS Security Update (October 2021)	Nessus	Windows : Microsoft Bulletins	high
154040	KB5006729: Windows 8.1 and Windows Server 2012 R2 Security Update (October 2021)	Nessus	Windows : Microsoft Bulletins	high
154038	Security Updates for Microsoft Office Products (October 2021)	Nessus	Windows : Microsoft Bulletins	high
154037	KB5006667: Windows 10 version 1909 Security Update (October 2021)	Nessus	Windows : Microsoft Bulletins	high
154036	KB5006732: Windows Server 2012 Security Update (October 2021)	Nessus	Windows : Microsoft Bulletins	high
154034	KB5006669: Windows 10 Version 1607 and Windows Server 2016 Security Update (October 2021)	Nessus	Windows : Microsoft Bulletins	high
154033	KB5006670: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 October 2021 Security Update	Nessus	Windows : Microsoft Bulletins	high
154029	KB5006699: Windows Server 2022 Security Update (October 2021)	Nessus	Windows : Microsoft Bulletins	high
154026	KB5006672: Windows 10 Version 1809 and Windows Server 2019 Security Update (October 2021)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2021-40454

medium

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high