CVE-2021-38657

medium

Microsoft

CVSS v3 Base Score

6.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

EPSS Score

0.8%

Exploitation probability in 30 days

Top 47% most likely to be exploited

Attack Characteristics

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Confidentiality

High

Integrity

None

Availability

Low

Published: September 15, 2021 (1818 days ago)

Last Modified: August 10, 2026

Source: NVD

Description

Microsoft Office Graphics Component Information Disclosure Vulnerability

NVD-CWE-noinfo

microsoft 365 apps