CVE WatchAug 19, 2026

CVE-2021-27059

Microsoft Office Remote Code Execution Vulnerability

CVSS

7.6

High

EPSS

6.1%

p93

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: Mar 11, 2021 · Last modified: Aug 19, 2026

EPSS · 30d

3.2%EPSS · 30 days6.1%

2026-08-022026-08-31

KEV catalog record

Product

Microsoft / Office

Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

Nov 17, 2021

Known ransomware use

Summary description

Microsoft Office contains an unspecified vulnerability that allows for remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-27059

Technical description

Microsoft Office Remote Code Execution Vulnerability

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-217157.3 HIG

95.8%

KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability12d CVE-2021-422927.8 HIG

98.6%

KEV—80Microsoft Excel Security Feature Bypass12d CVE-2021-386467.8 HIG

94.3%

KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability21d CVE-2017-11882—

100.0%

KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2023-23397—

99.9%

KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—CVE-2015-1641—

99.9%

KEV—80Microsoft Office Memory Corruption Vulnerability—