CVE-2021-38654

HighCVSS 7.8

Published: 15/09/2021(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.86%

91th percentile - higher than 91% of all known CVEs

Summary

Remote code execution vulnerability in Microsoft Office Visio. It could allow an attacker to execute code on the victim's system.

Risk Assessment

Risk of system compromise by opening a malicious Visio file.

Recommendation

Install security updates for Microsoft Office Visio.

Other vulnerabilities in Microsoft Office Visio

See all

CVE-2022-44696High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
CVE-2022-44695High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
CVE-2022-44694High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
CVE-2022-24510High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
CVE-2022-24509High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
CVE-2022-24461High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
CVE-2021-38653High
Remote code execution vulnerability in Microsoft Office Visio. Similar to other Visio flaws, it could allow an attacker to run code.
CVE-2024-38016High
A remote code execution vulnerability in Microsoft Office Visio.
CVE-2024-43463High
Vulnerability in Microsoft Office Visio allows remote code execution. An attacker could exploit it to run malicious code on the victim's system.
CVE-2023-36866High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.

Original NVD description (English source)

Microsoft Office Visio Remote Code Execution Vulnerability