Mar 2021: Microsoft Office Remote Code Execution Vulnerability
CVE-2021-27059 Published on March 11, 2021

Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability

Vendor Advisory NVD

Under Active Exploitation

This vulnerability is under active exploitation.

Known Exploited Vulnerability

This Microsoft Office Remote Code Execution Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Microsoft Office Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2021-24108, CVE-2021-27057.

The following remediation steps are recommended / required by November 17, 2021: Apply updates per vendor instructions.

Vulnerability Analysis

Exploitation:
ACTIVE
Automatable:
NO
Technical Impact:
TOTAL

Products Associated with CVE-2021-27059

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Office
Microsoft Excel
Microsoft Office 2016
Microsoft Office 2013

Affected Versions

Microsoft Office 2010 Service Pack 2: Microsoft Office 2013 Service Pack 1: Microsoft Office 2016:

Exploit Probability

EPSS
6.08%
Percentile
93.44%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.