CVE-2021-38656

—

CVSS 3.1

7.8 high

EPSS

7%p93

Published

Sep 15, 2021 (Sep 15, 2021)

Modified

Aug 10, 2026

Description

Microsoft Word Remote Code Execution Vulnerability

Vendors: microsoft
Products: 365 apps
Weakness: CWE-416
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.7%)

In the news1 stories

Microsoft Releases Patch for Actively Exploited Windows Zero

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2021Vulnerability in the wildCVE-2021-40444 CVE-2021-36968 CVE-2021-38647+10 CVEs

60