Back to CVE Browser

CVE-2021-27059

🔥 Known Exploited (CISA KEV)HIGH

7.6

CVSS Severity Score

EPSS Score77.2820%

EPSS Percentile91.36th

Published2021-03-11

Last Modified2025-10-30

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Microsoft Office Remote Code Execution Vulnerability

Affected Platforms (CPE)

📦

Microsoft

Office

= 2010= 2013= 2016

References & Advisories

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27059

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27059

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27059

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 29, 2026

Today’s threat intelligence covers active exploitation of Arista VeloCloud CVE-2026-16812, unauthenticated TeamCity RCE CVE-2026-63077, exposed IPMI/BMC password risks, and the Origin Energy and MCBS breach updates.

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

Daily Global Cyber Threat Intelligence Digest — July 28, 2026

Today’s threat intelligence covers the Certighost CVE-2026-54121 AD CS domain-takeover chain, vBulletin CVE-2026-61511 pre-auth RCE, the expanding Dysphoria botnet, and the DentaQuest and Fairlife breach updates.

Related Vulnerabilities

CVE-2026-610729.9

Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft (component: Staffing). ...

CVE-2026-605937.5

Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft (component: Staffing Front Offic...

An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers ...

CVE-2026-628264.6

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an auth...