CVE-2021-40486: Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-40486?
CVE-2021-40486 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of Microsoft Office.
How severe is CVE-2021-40486?
CVE-2021-40486 has a severity rating of 7.8, which is considered critical.
How can this vulnerability be exploited?
To exploit CVE-2021-40486, user interaction is required in the form of visiting a malicious page or opening a malicious file.
Which products are affected by CVE-2021-40486?
Microsoft Office, Microsoft Word 2013, Microsoft Word 2016, Microsoft SharePoint Enterprise Server 2013, Microsoft Office Web Apps Server 2013, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Online Server, Microsoft Word 2013 RT, Microsoft Office 2019 for 32-bit editions, Microsoft SharePoint Server 2019, and Microsoft Office 2019 for 64-bit editions are affected by CVE-2021-40486.
How can I fix CVE-2021-40486?
To fix CVE-2021-40486, you should apply the relevant patches or updates provided by Microsoft for the affected products.