Background /What has happened?
Microsoft released multiple security updates to a range of products in its 12 October 2021 . The ACSC recommends that all vulnerabilities identified in the release should be mitigated as outlined in the ACSC’s . The vulnerabilities identified affect a wide range of Microsoft Office versions and other applications which handle Microsoft Office files. The ACSC wishes to draw particular attention to the following vulnerabilities for priority consideration:
• : Microsoft Exchange Server Remote Code Execution Vulnerability.
• : Microsoft Word Remote Code Execution Vulnerability.
• and : Microsoft SharePoint Server Remote Code Execution Vulnerabilities.
Mitigation / How do I stay secure?
Australian organisations and users of utilise Microsoft products should review Microsoft’s and identify and apply relevant security updates for their environment. Australian organisations and users who utilise Microsoft Exchange Server, Microsoft Office Word or Microsoft SharePoint should review the vulnerabilities listed above as a priority and apply the available patch from Microsoft.
