CVE-2021-27059
Microsoft Office Remote Code Execution Vulnerability
CVSS
7.6
High
EPSS
6.1%
p93
KEV
YES
Nov 3, 2021
Exploit Today
78
0-100
Published: Mar 11, 2021 · Last modified: Aug 19, 2026
6.1%EPSS · 30 days6.1%
2026-09-172026-10-15
Product
Microsoft / Office
Vulnerability
Microsoft Office Remote Code Execution Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
Nov 17, 2021
Known ransomware use
No
Summary description
Microsoft Office contains an unspecified vulnerability that allows for remote code execution.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-27059
Microsoft Office Remote Code Execution Vulnerability
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2023-217157.3 HIG96.1%
KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability58dCVE-2021-422927.8 HIG98.7%
KEV—80Microsoft Excel Security Feature Bypass58dCVE-2021-386467.8 HIG94.7%
KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability66dCVE-2017-11882—100.0%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2015-1641—99.9%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2023-23397—99.9%
KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—