7.8

CVE-2021-40486

Microsoft Word Remote Code Execution Vulnerability

Data is provided by the National Vulnerability Database (NVD)
MicrosoftOffice Version2019
MicrosoftOffice Web Apps Server Version2013 Updatesp1
MicrosoftSharepoint Enterprise Server Version2013 Updatesp1
MicrosoftSharepoint Server Version2019
MicrosoftWord Version2013 Updatesp1
MicrosoftWord Version2013 Updatesp1 SwEditionrt
MicrosoftWord Version2016
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.16% 0.864
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
secure@microsoft.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H