CVE-2021-27059

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2021-27059 is a remote code execution vulnerability affecting Microsoft Office. It carries a CVSS 3.1 base score of 7.6 with the vector AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H, indicating network-accessible exploitation that requires high attack complexity, high privileges, and user interaction while producing high impacts on confidentiality, integrity, and availability along with a scope change.

An attacker meeting the privilege and interaction prerequisites can leverage the flaw to execute arbitrary code on an affected system, potentially compromising the confidentiality, integrity, and availability of data across security boundaries.

Microsoft has published remediation guidance through its Security Response Center advisory, and the vulnerability appears in CISA's catalog of known exploited vulnerabilities, confirming real-world exploitation activity.