cve/2021/CVE-2021-38646.md

### [CVE-2021-38646](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38646)
![](https://img.shields.io/static/v1?label=Product&message=Microsoft%20365%20Apps%20for%20Enterprise&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Microsoft%20Office%202013%20Service%20Pack%201&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Microsoft%20Office%202016&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Microsoft%20Office%202019&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=15.0.0%3C%205381.1000%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=16.0.0%3C%205215.1000%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=16.0.1%3C%20https%3A%2F%2Faka.ms%2FOfficeSecurityReleases%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=19.0.0%3C%20https%3A%2F%2Faka.ms%2FOfficeSecurityReleases%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Remote%20Code%20Execution&color=brighgreen)

### Description

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/3th1c4l-t0n1/awesome-csirt
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Ostorlab/KEV
- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
- https://github.com/Spacial/awesome-csirt