First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-27059

HighCVSS 7.6/10Known exploited (CISA KEV)Last modified Aug 19, 2026

Description

Microsoft Office Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.6/10CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Office 2010 Service Pack 2	>= 13.0.0.0, < 14.0.7266.5000
Microsoft	Microsoft Office 2013 Service Pack 1	>= 15.0.0, < publication
Microsoft	Microsoft Office 2016	>= 16.0.0, < 16.0.5134.1000

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27059Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27059Patch, Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27059US Government Resource

Timeline

Published: Mar 11, 2021
Last modified: Aug 19, 2026
Added to CISA KEV: Nov 3, 2021
NVD status: Analyzed

Related CVEs from 2021

CVE-2021-270607.8Visual Studio Code Remote Code Execution Vulnerability CVE-2021-270617.8HEVC Video Extensions Remote Code Execution Vulnerability CVE-2021-270627.8HEVC Video Extensions Remote Code Execution Vulnerability CVE-2021-270637.5Windows DNS Server Denial of Service Vulnerability CVE-2021-270647.8Visual Studio Installer Elevation of Privilege Vulnerability CVE-2021-270657.8Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2021-270664.3Windows Admin Center Security Feature Bypass Vulnerability CVE-2021-270676.5Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability CVE-2021-270688.8Visual Studio Remote Code Execution Vulnerability CVE-2021-270707.3Windows 10 Update Assistant Elevation of Privilege Vulnerability CVE-2021-270727.0Win32k Elevation of Privilege Vulnerability CVE-2021-270746.2Azure Sphere Unsigned Code Execution Vulnerability