Skip to content
OpenAdvisories
High · 7.8 CVE-2021-40486 EUVD-2021-27663GHSA-f354-fqf2-9hm4

Microsoft Word Remote Code Execution Vulnerability

Published Oct 13, 2021 · Updated Aug 4, 2024 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Office 2019 Product: Microsoft Office Online Server Product: Microsoft Office Web Apps Server 2013 Service Pack 1 Product: Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Product: Microsoft SharePoint Enterprise Server 2016 Product: Microsoft SharePoint Server 2019 Product: Microsoft Word 2013 Service Pack 1 Product: Microsoft Word 2016

Description

Microsoft Word Remote Code Execution Vulnerability

Affected products

VendorProductAffectedFixed
Microsoft Microsoft SharePoint Enterprise Server 2016 16.0.0 – < 16.0.5227.1000 16.0.5227.1000
Microsoft Microsoft SharePoint Enterprise Server 2013 Service Pack 1 15.0.0 – < 15.0.5389.1000 15.0.5389.1000
Microsoft Microsoft SharePoint Server 2019 16.0.0 – < 16.0.10379.20000 16.0.10379.20000
Microsoft Microsoft Office 2019 19.0.0 – < https://aka.ms/OfficeSecurityReleases https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft Office Online Server 16.0.1 – < 16.0.10379.20000 16.0.10379.20000
Microsoft Microsoft Word 2016 16.0.1 – < 16.0.5227.1000 16.0.5227.1000
Microsoft Microsoft Office Web Apps Server 2013 Service Pack 1 15.0.1 – < 15.0.5389.1000 15.0.5389.1000
Microsoft Microsoft Word 2013 Service Pack 1 15.0.1 – < 15.0.5389.1000 15.0.5389.1000

References