$ cve CVE-2021-27059 JSON

CVE-2021-27059 KEV

7.6

HIGH · CVSS 3.1 · EPSS 6.1% (pctl 93)

Patch first

On CISA KEV — known exploited in the wild, due 2021-11-17.

Microsoft Office Remote Code Execution Vulnerability

CVSS	7.6 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
EPSS	6.08% — more likely to be exploited than 93% of all CVEs
On CISA KEV	yes — remediate by 2021-11-17
Public exploit	none known
Published	2021-03-11
Last modified	2026-08-19

Name	Microsoft Office Remote Code Execution Vulnerability
Added	2021-11-03
Due	2021-11-17
Vendor / product	Microsoft / Office
Ransomware use	none reported

Vendor	Product
microsoft	office
microsoft	office 2016