CVE-2021-40454 | SynScan

Vulnerability Database

289,571

Total vulnerabilities in the database

CVE-2021-40454

Rich Text Edit Control Information Disclosure Vulnerability

Published: Oct 13, 2021
Updated: May 4, 2025
CVE: CVE-2021-40454
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 2.1
AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

CWE-312

OWASP TOP 10:

A3 - Sensitive Data Exposure

Affected Software
References

Software	From	Fixed in
microsoft / windows_10	1607	1607.x
microsoft / windows_server_2012	r2	r2.x
microsoft / office	2013-sp1	2013-sp1.x
microsoft / office	2016	2016.x
microsoft / office	2013_rt-sp1	2013_rt-sp1.x
microsoft / windows_10	1809	1809.x
microsoft / windows_10	1909	1909.x
microsoft / office	2019	2019.x
microsoft / windows_10	2004	2004.x
microsoft / windows_10	20h2	20h2.x
microsoft / windows_10	21h1	21h1.x
microsoft / windows_server_2022	-	-
microsoft / windows_server	20h2	20h2.x
microsoft / windows_server	2004	2004.x
microsoft / office	2021	2021.x

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40454