References https://nvd.nist.gov/vuln/detail/CVE-2021-42292 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2021-42292 https://www.rapid7.com/db/vulnerabilities/microsoft-office-cve-2021-42292/ https://arcticwolf.com/resources/blog/patches-released-for-actively-exploited-vulnerabilities-in-microsoft-exchange-and-microsoft-excel-cve-2021-42321-cve-2021-42292/ https://blog.invgate.com/patch-cve-2021-42292 https://www.sentinelone.com/vulnerability-database/cve-2021-42292/ https://github.com/corelight/CVE-2021-42292 https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-excel-zero-day-used-in-attacks-asks-mac-users-to-wait/ https://www.cve.org/CVERecord?id=CVE-2021-42292 https://corelight.com/blog/detecting-cve-2021-42292
Related VulnerabilitiesPoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCEMicrosoft SharePoint /_layouts/15/ToolPane.aspx 代码执行漏洞(CVE-2025-53770)Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞(CVE-2026-50522)Microsoft SharePoint Server JWT 权限绕过漏洞(CVE-2026-55040)PoCdzzoffice-installer: DzzOffice - Installer Page Exposure关于NC系统IObaExcelService的sql注入漏洞的安全通告用友 NC /uapws/service/nc.itf.bap.oba.IObaExcelService XML 外部实体注入漏洞泛微e-office /iWebOffice/Signature/SignatureDel.php SQL 注入漏洞万户 ezOFFICE /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../platform/bpm/work_flow/operate/wf_relation.jsp SQL 注入漏洞PoCCVE-2026-25512: Group-Office < 26.0.5 - Remote Code ExecutionPoCCVE-2021-28480: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)PoCCVE-2021-28481: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)帆软报表 export/excel 存在SQL注入漏洞