CVE-2021-38660: Microsoft Office Graphics Remote Code Execution Vulnerability
Published Sep 14, 2021
·Updated
Microsoft Office Graphics Remote Code Execution Vulnerability
Affected Software
5 affected componentsFixes available
Microsoft Excel=2013-sp1
Microsoft Excel=2013-sp1
Microsoft Excel 2013<5381.1000
5381.1000
Microsoft Excel 2013<5381.1000
5381.1000
Microsoft Excel 2013 RT<5381.1000
5381.1000
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5381.1000Patch KB5002014
Event History
Sep 14, 2021
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
Sep 15, 2021
CVE Published
via MITRE·11:24 AM
Data Sourced
via MITRE·11:24 AM
DescriptionSeverity
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-38660?
CVE-2021-38660 is a Microsoft Office Graphics Remote Code Execution Vulnerability.
2
What is the severity of CVE-2021-38660?
CVE-2021-38660 has a severity rating of 7.8 (high).
3
Which software is affected by CVE-2021-38660?
Microsoft Excel 2013 SP1 is affected by CVE-2021-38660.
4
How can I fix CVE-2021-38660?
To fix CVE-2021-38660, apply the security updates provided by Microsoft.
5
Where can I find more information about CVE-2021-38660?
You can find more information about CVE-2021-38660 on the Microsoft Security Guidance Advisory page: [https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38660](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38660)