CVE-2021-40486

—

CVSS 3.1

7.8 high

EPSS

6%p93

Published

Oct 13, 2021 (Oct 13, 2021)

Modified

Jun 17, 2026

Description

Microsoft Word Remote Code Execution Vulnerability

Vendors: microsoft
Products: office, office online server, office web apps server, sharepoint enterprise server, sharepoint server, word
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.0%)

In the news2 stories

Update Your Windows PCs Immediately to Patch New 0

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2021Vulnerability in the wildCVE-2021-40449 CVE-2021-41335 CVE-2021-40469+10 CVEs

60

Microsoft patches actively exploited Windows zero-day (CVE-2021-40449)

Help Net SecurityOct 12, 00:00 UTC · Oct 12, 2021Exploit / PoC in the wildCVE-2021-40449 CVE-2021-40486 CVE-2021-26427+5 CVEs

60