CVE Catalog

CVE-2021-38657

MediumCVSS 6.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.78%

53th percentile - higher than 53% of all known CVEs

Summary

Information Disclosure vulnerability in Microsoft Office Graphics Component. Could allow an attacker to read data from memory.

Risk Assessment

Risk of leaking sensitive data processed by graphics in Office documents.

Recommendation

Install security updates for Microsoft Office.

Original NVD description (English source)

Microsoft Office Graphics Component Information Disclosure Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS