CVE-2021-27059: Microsoft Office Remote Code Execution Vulnerability
Published Mar 9, 2021
·Updated
Microsoft Office contains an unspecified vulnerability that allows for remote code execution.
Other sources
Microsoft Office Remote Code Execution Vulnerability
— NVD
Affected Software
19 affected componentsFixes available
Microsoft Office
Microsoft Office=2010-sp2
Microsoft Office=2010-sp2
Microsoft Office=2013-sp1
Microsoft Office=2013-sp1
Microsoft Office=2013-sp1
Microsoft Office=2016
Microsoft Office=2016
Microsoft Office 2013 RT
Microsoft Office 2016<16.0.5134.1000
16.0.5134.1000
Microsoft Office 2010<14.0.7266.5000
14.0.7266.5000
Microsoft Office 2016<16.0.5134.1000
16.0.5134.1000
Microsoft Office 2013<15.0.5327.1000
15.0.5327.1000
Microsoft Office 2010<14.0.7266.5000
14.0.7266.5000
Microsoft Office 2013<15.0.5327.1000
15.0.5327.1000
Microsoft Office=2010-sp2
Microsoft Office=2013-sp1
Microsoft Office 2016
Microsoft Office 2016
Remediation
Event History
Mar 9, 2021
CVE Published
via Microsoft·04:00 PM
Known Exploited
via Microsoft·04:00 PM
Data Sourced
via Microsoft·04:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·04:00 PM
Affected Software
Updated
via Microsoft·04:00 PM
Description
Mar 11, 2021
CVE Published
via MITRE·03:49 PM
Data Sourced
via MITRE·03:49 PM
DescriptionSeverity
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-27059?
CVE-2021-27059 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2021-27059?
To fix CVE-2021-27059, install the latest security updates for Microsoft Office provided by Microsoft.
3
Which versions of Microsoft Office are affected by CVE-2021-27059?
CVE-2021-27059 affects Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016.
4
What types of attacks can exploit CVE-2021-27059?
CVE-2021-27059 can be exploited through malicious documents that execute harmful code when opened.
5
Is CVE-2021-27059 being actively exploited in the wild?
Yes, CVE-2021-27059 has been reported to be actively exploited in the wild.