CVE-2021-38658: Microsoft Office Graphics Remote Code Execution Vulnerability
Published Sep 14, 2021
·Updated
Microsoft Office Graphics Remote Code Execution Vulnerability
Affected Software
11 affected componentsFixes available
Microsoft Office 2013
Microsoft Office 2013
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2016
Microsoft Office=2013-sp1
Microsoft Office=2013-sp1
Microsoft Office=2016
Microsoft Office=2019
Microsoft Office 2016
Microsoft Office 2013 RT
Remediation
Event History
Sep 14, 2021
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Sep 15, 2021
CVE Published
via MITRE·11:24 AM
Data Sourced
via MITRE·11:24 AM
DescriptionSeverity
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jun 29, 2026
Advisory Published
via ZDI·04:43 AM
Data Sourced
via ZDI·04:43 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2021-38658?
CVE-2021-38658 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of Microsoft Office.
2
How severe is CVE-2021-38658?
CVE-2021-38658 has a severity rating of 7.8, which is considered high.
3
Which versions of Microsoft Office are affected by CVE-2021-38658?
Microsoft Office 2013, 2016, and 2019 (32-bit and 64-bit editions) are affected by CVE-2021-38658.
4
How can I fix CVE-2021-38658?
To fix CVE-2021-38658, you should apply the relevant patches provided by Microsoft for your specific version of Microsoft Office.
5
Where can I find more information about CVE-2021-38658?
You can find more information about CVE-2021-38658 on the Microsoft Security Response Center website, the Zero Day Initiative's advisory, and the Microsoft Update Guide.