High MSRC-CVE-2021-38660 1 CVE

Microsoft Office Graphics Remote Code Execution Vulnerability

Published Sep 14, 2021 · Updated Sep 14, 2021

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.

Security updates
5381.1000 — https://support.microsoft.com/kb/5002014

Vulnerabilities 1

High 7.8

CVE-2021-38660

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Microsoft Excel 2013 Service Pack 1

Sep 15, 2021

Revision history

2021-09-14 #1
Information published.

References

CVE-2021-38660 Microsoft Office Graphics Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38660
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss