CVE-2021-27059: high-severity vulnerability in Microsoft Office 2010 Service Pack 2
Microsoft Office Remote Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A flaw in Microsoft Office allows attackers to run malicious code on your computer by tricking you into opening a specially crafted Office document. This is dangerous because it gives attackers complete control of your system.
Remote code execution vulnerability in Microsoft Office triggered via a malicious document file. The attack vector requires user interaction (opening/previewing a crafted file), but upon exploitation, arbitrary code executes with the privileges of the Office application process. This enables full system compromise depending on user privilege level.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.