CVE-2021-31178

—1

CVSS 3.1

5.5 medium

EPSS

16%p97

Published

May 11, 2021 (May 11, 2021)

Modified

Jun 17, 2026

Description

Microsoft Office Information Disclosure Vulnerability

Vendors: microsoft
Products: 365 apps, excel, office, office online server, office web apps server, word
Weakness: CWE-191
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (16.0%)

In the news2 stories

New UAF Vulnerability Affecting Microsoft Office to be Patched Today

The Hacker NewsJun 9, 04:21 UTC · Jun 9, 2021Vulnerability CVE-2021-31174 CVE-2021-31178 CVE-2021-31179+1 CVEs

47

4 issues in Microsoft Office component allow to weaponize docs

Security AffairsJun 8, 20:45 UTC · Jun 8, 2021Vulnerability CVE-2021-31179 CVE-2021-31174 CVE-2021-31178+1 CVEs1

47