CVE-2021-28454

Description

References

• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28454 · Patch
• zerodayinitiative.com/advisories/ZDI-21-410 · Third Party Advisory

More vulnerabilities in office

• CVE-2026-70105HIGH 7.5Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-55054MEDIUM 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-47293HIGH 7.0Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
• CVE-2026-42832MEDIUM 5.5Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-42831HIGH 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.