CVE-2021-31174

—

CVSS 3.1

5.5 medium

EPSS

3%p86

Published

May 11, 2021 (May 11, 2021)

Modified

Jun 17, 2026

Description

Microsoft Excel Information Disclosure Vulnerability

Vendors: microsoft
Products: 365 apps, excel, office, office online server, office web apps server
Weakness: CWE-125
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.9%)

In the news2 stories

New UAF Vulnerability Affecting Microsoft Office to be Patched Today

The Hacker NewsJun 9, 04:21 UTC · Jun 9, 2021Vulnerability CVE-2021-31174 CVE-2021-31178 CVE-2021-31179+1 CVEs

47

4 issues in Microsoft Office component allow to weaponize docs

Security AffairsJun 8, 20:45 UTC · Jun 8, 2021Vulnerability CVE-2021-31179 CVE-2021-31174 CVE-2021-31178+1 CVEs1

47