Email:

Phone No.

Whatsapp

Microsoft Office February Security Updates Patch Sharepoint, Excel RCE Bugs

  • Home
  • Microsoft Office February Security Updates Patch Sharepoint, Excel RCE Bugs
Microsoft Office February Security Updates Patch Sharepoint, Excel RCE Bugs
Microsoft Office February Security Updates Patch Sharepoint, Excel RCE Bugs
Microsoft Office February Security Updates Patch Sharepoint, Excel RCE Bugs
Microsoft Office February Security Updates Patch Sharepoint, Excel RCE Bugs
Microsoft Office February Security Updates Patch Sharepoint, Excel RCE Bugs

Microsoft Office February Security Updates Patch Sharepoint, Excel RCE Bugs

Microsoft has addressed important severity remote code execution vulnerabilities affecting multiple Office products in the January 2021 Office security updates.

In total, the company released 26 security updates and 5 cumulative updates for 7 different products, fixing 11 vulnerabilities that could allow attackers to escalate privileges or execute arbitrary code remotely on systems running vulnerable software.

This Patch Tuesday, Microsoft also issued several SharePoint non-security updates, as well as fixed separate issues affecting the Microsoft 365 Apps version of Outlook.

Microsoft also released non-security Office updates last week addressing bugs that may lead to PowerPoint crashes and other issues affecting Windows Installer (MSI) editions of Office 2016, Office 2013, and Office 2010 products.

The company issued the February 2021 Patch Tuesday updates yesterday, with patches for a Windows Win32k elevation of privilege zero-day exploited in the wild and 56 other security vulnerabilities, 11 of them classified as critical severity.

Additionally, Microsoft urged customers to install security updates for three critical and high severity Windows TCP/IP security bugs as soon as possible due to the elevated exploitation risk and potential denial-of-service (DoS) attacks that could soon target unpatched systems.

Non-security Windows updates were delivered to Windows 10 customers with the KB4601315 and KB4601319 cumulative updates.

Also Read: What Do 4 Messaging Apps Get From You? Read The iOS Privacy App Labels

Patched Office security vulnerabilities

This month’s Office security updates address bugs exposing Windows systems running vulnerable Click to Run and Microsoft Installer (.msi)-based editions of Microsoft Office products to remote code execution (RCE), information disclosure, and spoofing attacks.

Microsoft rated the six RCE bugs patched in February 2021 as Important severity issues given that they could enable attackers to execute arbitrary code in the context of the currently logged-in user.

Following successful exploitation, attackers could install malicious programs, view, change, and delete data, as well as make their own admin accounts on exploited Windows devices.

TagCVE IDCVE TitleSeverity
Microsoft Office ExcelCVE-2021-24067Microsoft Excel Remote Code Execution VulnerabilityImportant
Microsoft Office ExcelCVE-2021-24068Microsoft Excel Remote Code Execution VulnerabilityImportant
Microsoft Office ExcelCVE-2021-24069Microsoft Excel Remote Code Execution VulnerabilityImportant
Microsoft Office ExcelCVE-2021-24070Microsoft Excel Remote Code Execution VulnerabilityImportant
Microsoft Office SharePointCVE-2021-24071Microsoft SharePoint Information Disclosure VulnerabilityImportant
Microsoft Office SharePointCVE-2021-1726Microsoft SharePoint Spoofing VulnerabilityImportant
Microsoft Office SharePointCVE-2021-24066Microsoft SharePoint Remote Code Execution VulnerabilityImportant
Microsoft Office SharePointCVE-2021-24072Microsoft SharePoint Server Remote Code Execution VulnerabilityImportant

February 2021 Microsoft Office security updates

Microsoft Office security updates can be installed through the Microsoft Update platform or via Microsoft’s Download Center.

More information about each Office security update issued this month is available within the knowledge base articles linked in the table below.

To download the February 2021 Microsoft Office security updates, you have to click on the corresponding knowledge base article below and then scroll down to the ‘How to download and install the update‘ section.

Also Read: Key PDPA Amendments 2019/2020 You Should Know

Microsoft Office 2016
ProductKnowledge Base article title and number
Excel 2016Security update for Excel 2016 (KB4493196)
Microsoft Office 2013
ProductKnowledge Base article title and number
Excel 2013Security update for Excel 2013 (KB4493211)
Microsoft Office 2010
ProductKnowledge Base article title and number
Excel 2010Security update for Excel 2010 (KB4493222)
Microsoft SharePoint Server 2019
ProductKnowledge Base article title and number
Office Online ServerSecurity update for Office Online Server (KB4493192)
SharePoint Server 2019Security update for SharePoint Server 2019: February 9, 2021 (KB4493194)
SharePoint Server 2019 Language PackUpdate for SharePoint Server 2019 Language Pack (KB4493193)
Microsoft SharePoint Server 2016
ProductKnowledge Base article title and number
SharePoint Enterprise Server 2016Security update for SharePoint Enterprise Server 2016 (KB4493195)
Microsoft SharePoint Server 2013
ProductKnowledge Base article title and number
Office Web Apps Server 2013Security update for Office Web Apps Server 2013 (KB4493204)
Project Server 2013Cumulative update for Project Server 2013 (KB4493207)
SharePoint Enterprise Server 2013Cumulative update for SharePoint Enterprise Server 2013 (KB4493209)
SharePoint Foundation 2013Security update for SharePoint Foundation 2013 (KB4493210)
SharePoint Foundation 2013Cumulative update for SharePoint Foundation 2013 (KB4493205)
Microsoft SharePoint Server 2010
ProductKnowledge Base article title and number
Project Server 2010Update for Project Server 2010 (KB4475537)
Project Server 2010Cumulative update for Project Server 2010 (KB4493217)
SharePoint Foundation 2010Security update for SharePoint Foundation 2010 (KB4493223)
SharePoint Server 2010Cumulative update for SharePoint Server 2010 (KB4493220)
SharePoint Server 2010Update for SharePoint Server 2010 (KB4493212)
SharePoint Server 2010 Office Web AppsUpdate for SharePoint Server 2010 Office Web Apps (KB4493219)
× Chat with us