CVE Catalog
CVE-2021-38657
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk0.78%
53th percentile - higher than 53% of all known CVEs
Summary
Information Disclosure vulnerability in Microsoft Office Graphics Component. Could allow an attacker to read data from memory.
Risk Assessment
Risk of leaking sensitive data processed by graphics in Office documents.
Recommendation
Install security updates for Microsoft Office.
Other vulnerabilities in Microsoft Office Graphics
See all- CVE-2021-38659High
Vulnerability in Microsoft Office Graphics allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
- CVE-2021-38660High
Remote code execution vulnerability in Microsoft Office Graphics. An attacker could exploit this flaw to execute code on the victim's system.
Original NVD description (English source)
Microsoft Office Graphics Component Information Disclosure Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS