8.5

CVE-2021-27059

Warnung

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Office Version 2010 Update sp2
Microsoft ≫ Office Version 2013 Update sp1
Microsoft ≫ Office Version 2013 Update sp1 SwEdition rt
Microsoft ≫ Office 2016 Version - SwEdition - HwPlatform x64
Microsoft ≫ Office 2016 Version - SwEdition - HwPlatform x86

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Office Remote Code Execution Vulnerability

Schwachstelle

Microsoft Office contains an unspecified vulnerability that allows for remote code execution.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.08% 0.928
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.5 6.8 10
AV:N/AC:M/Au:S/C:C/I:C/A:C
NIST 6.5 0.6 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Microsoft 7.6 1 6
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27059
Patch
Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27059
Patch
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27059
US Government Resource