CVE Catalog

CVE-2021-38659

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
4.86%

91th percentile - higher than 91% of all known CVEs

Summary

Vulnerability in Microsoft Office Graphics allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.

Risk Assessment

Risk of victim system compromise via opening a malicious graphics file in Office.

Recommendation

Install the latest security updates for Microsoft Office.

Original NVD description (English source)

Microsoft Office Graphics Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS