CVE Catalog
CVE-2021-38658
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk4.86%
91th percentile - higher than 91% of all known CVEs
Summary
Remote code execution vulnerability in Microsoft Office Graphics. An attacker could exploit it to run arbitrary code in the context of the logged-in user.
Risk Assessment
Risk of system compromise if a user opens a malicious graphics file in Office.
Recommendation
Install the latest Microsoft Office security updates.
Original NVD description (English source)
Microsoft Office Graphics Remote Code Execution Vulnerability