CVE-2021-31174: Microsoft Excel Information Disclosure Vulnerability
Published May 11, 2021
·Updated
Microsoft Excel Information Disclosure Vulnerability
Affected Software
10 affected components
Microsoft 365 Apps
Microsoft Excel=2013-sp1
Microsoft Excel=2013-sp1
Microsoft Excel=2016
Microsoft Office=2013-sp1
Microsoft Office=2013-sp1
Microsoft Office=2016
Microsoft Office=2019
Microsoft Office Online Server
Microsoft Office Web Apps Server=2013-sp1
Remediation
Event History
May 11, 2021
CVE Published
07:11 PM
Data Sourced
07:11 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2021-31174?
CVE-2021-31174 is a vulnerability in Microsoft Excel that allows for information disclosure.
2
What is the severity of CVE-2021-31174?
The severity of CVE-2021-31174 is rated as medium (5.5).
3
What software versions are affected by CVE-2021-31174?
Microsoft Office LTSC for Mac 2021, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Office 2019, Microsoft Office Online Server, and Microsoft Office Web Apps Server 2013 SP1 are affected by CVE-2021-31174.
4
How does CVE-2021-31174 work?
CVE-2021-31174 allows an attacker to access sensitive information in an Excel document by exploiting a vulnerability in the software.
5
Is there a fix for CVE-2021-31174?
Yes, Microsoft has released a security update to address the vulnerability. It is recommended to install the latest updates for the affected software.