CVE Catalog
CVE-2021-31984
HighCVSS 7.6Exploitation Probability (EPSS)
High risk1.80%
76th percentile - higher than 76% of all known CVEs
Summary
Remote code execution vulnerability in Power BI. Allows an attacker to execute code in the context of the service.
Risk Assessment
Potential compromise of data integrity and control over the Power BI environment.
Recommendation
Update Power BI to the latest version and apply recommended security patches.
Other vulnerabilities in Power BI
See all- CVE-2026-65811High
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
- CVE-2026-58647High
A cross-site scripting (XSS) vulnerability in Power BI allows an authorized attacker to perform spoofing over a network. The flaw is caused by improper neutralization of input during web page generation.
Original NVD description (English source)
Power BI Remote Code Execution Vulnerability