CVE Catalog
CVE-2021-38659
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk4.86%
91th percentile - higher than 91% of all known CVEs
Summary
Vulnerability in Microsoft Office Graphics allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
Risk Assessment
Risk of victim system compromise via opening a malicious graphics file in Office.
Recommendation
Install the latest security updates for Microsoft Office.
Other vulnerabilities in Microsoft Office Graphics
See all- CVE-2021-38660High
Remote code execution vulnerability in Microsoft Office Graphics. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-38657Medium
Information Disclosure vulnerability in Microsoft Office Graphics Component. Could allow an attacker to read data from memory.
Original NVD description (English source)
Microsoft Office Graphics Remote Code Execution Vulnerability