Riskcovery

CVE-2021-27057

Microsoft Office Remote Code Execution Vulnerability

State
Published
Severity
7.8 High
Published
Mar 11, 2021
Updated
Aug 19, 2026
Reserved
Feb 10, 2021

Read the record on cve.org

Description

Microsoft Office Remote Code Execution Vulnerability

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Cmicrosoft

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Microsoft 365 Apps for EnterpriseMicrosoft
  • 16.0.1 to before https://aka.ms/OfficeSecurityReleasesAffected
Microsoft Excel 2010 Service Pack 2Microsoft
  • 13.0.0.0 to before 14.0.7266.5000Affected
Microsoft Excel 2013 Service Pack 1Microsoft
  • 15.0.0.0 to before publicationAffected
Microsoft Excel 2016Microsoft
  • 16.0.0.0 to before 16.0.5134.1000Affected
Microsoft Office 2010 Service Pack 2Microsoft
  • 13.0.0.0 to before 14.0.7266.5000Affected
Microsoft Office 2013 Service Pack 1Microsoft
  • 15.0.0 to before publicationAffected
Microsoft Office 2016Microsoft
  • 16.0.0 to before 16.0.5134.1000Affected
Microsoft Office 2019Microsoft
  • 19.0.0 to before https://aka.ms/OfficeSecurityReleasesAffected
Microsoft Office 2019 for MacMicrosoft
  • 16.0.0 to before publicationAffected
Microsoft Office Online ServerMicrosoft
  • 16.0.1 to before 16.0.10372.20000Affected
Microsoft Office Web Apps 2013 Service Pack 1Microsoft
  • 15.0.0.0 to before 15.0.5327.1000Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.