NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2021-40486

CVSS 3.1: 7.8 high
EPSS: 6%p93
Published: Oct 13, 2021 · Oct 13, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-40486 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Word Remote Code Execution Vulnerability

Vendors: microsoft

Products: office, office online server, office web apps server, sharepoint enterprise server, sharepoint server, word

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.0%)

In the news

2 stories

Update Your Windows PCs Immediately to Patch New 0

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2021VulnerabilityExploitedCVE-2021-40449 CVE-2021-41335 CVE-2021-40469+102 · 1 read

60

Microsoft patches actively exploited Windows zero-day (CVE-2021-40449)

Help Net SecurityOct 12, 00:00 UTC · Oct 12, 2021Exploit / PoCExploitedCVE-2021-40449 CVE-2021-40486 CVE-2021-26427+52 · 1 read

60