CVE:CVE-2021-40454
CNNVD:CNNVD-202110-855
Microsoft Rich Text Edit Control是美国微软（Microsoft）公司的一个富文本编辑器的实现。
Microsoft Rich Text Edit Control 存在信息泄露漏洞，该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。
solution:Upgrade microsoft 365_apps to a higher version than -; Upgrade microsoft office to a higher version than 2013:sp1,2013_rt:sp1,2016,2019,2021,and avoid the version 2013:sp1,2013_rt:sp1,2016,2019,2021; Upgrade microsoft windows_10 to a higher version than -,20h2,21h1,1607,1809,1909,2004,and avoid the version 20h2,21h1,1607,1809,1909,2004; Upgrade microsoft windows_11 to a higher version than -; Upgrade microsoft windows_8.1 to a higher version than -; Upgrade microsoft windows_rt_8.1 to a higher version than -; Upgrade microsoft windows_server to a higher version than 20h2,2004,and avoid the version 20h2,2004; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -; Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade microsoft windows_server_2022 to a higher version than *