CVE-2021-27085

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Aug 19, 2026

Description

Internet Explorer Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L

Affected software

No affected versions have been published.

Timeline

Published
Mar 11, 2021
Last modified
Aug 19, 2026
Added to CISA KEV
Nov 3, 2021
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-270867.8Windows Services and Controller App Elevation of Privilege VulnerabilityCVE-2021-270887.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-270897.8Microsoft Internet Messaging API Remote Code Execution VulnerabilityCVE-2021-270907.8Windows Secure Kernel Mode Elevation of Privilege VulnerabilityCVE-2021-270917.8RPC Endpoint Mapper Service Elevation of Privilege VulnerabilityCVE-2021-270926.8Azure AD Web Sign-in Security Feature Bypass VulnerabilityCVE-2021-270935.5Windows Kernel Information Disclosure VulnerabilityCVE-2021-270944.4Windows Early Launch Antimalware Driver Security Feature Bypass VulnerabilityCVE-2021-270957.8Windows Media Video Decoder Remote Code Execution VulnerabilityCVE-2021-270967.8NTFS Elevation of Privilege VulnerabilityCVE-2021-270977.8The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT.CVE-2021-270988.1In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SP
CVE-2021-27085: High severity, CVSS 8.8 | Vulnix