rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-27005 
Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Clustered Data ONTAP
Published: 2021-11-01T13:16:06.000Z
CVE-2021-27006 
StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a vulnerability which may allow an administrative user to escalate their privileges and modify settings in SANtricity System Manager.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: StorageGRID (formerly StorageGRID Webscale)
Published: 2021-12-23T19:48:47.000Z
CVE-2021-27007 
NetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a vulnerability which when successfully exploited could allow an unauthenticated attacker to takeover a Remote Desktop Session.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: NetApp Virtual Desktop Service (VDS)
Published: 2021-12-23T19:48:46.000Z
CVE-2021-27017 Deserialization of untrusted data
Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. This is resolved in the Puppet Agent 7.4.0 release.
Affected products: vendor: PuppetPu
product: Puppet Agent
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2025-02-07T19:28:45.531Z
CVE-2021-27018 
The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source.
Problem types: description: Improper Verification of Cryptographic Signature
Affected products: vendor: n/a
product: Puppet Remediate
Published: 2021-08-30T17:56:05.000Z
CVE-2021-27019 
PuppetDB logging included potentially sensitive system information.
Problem types: description: Insertion of Sensitive Information into Log File
Affected products: vendor: n/a
product: PuppetDB, Puppet Enterprise
Published: 2021-08-30T17:56:04.000Z
CVE-2021-27020 
Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.
Problem types: description: Formula Injection
Affected products: vendor: n/a
product: Puppet Enterprise
Published: 2021-08-30T17:56:03.000Z
CVE-2021-27021 
A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.
Problem types: cwe_id: CWE-1027
description: [CWE-1027|https://cwe.mitre.org/data/definitions/1027.html]
Affected products: vendor: n/a
product: Puppet DB
Published: 2021-07-20T10:44:49.000Z
CVE-2021-27022 
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).
Problem types: cwe_id: CWE-532
description: [CWE-532: Insertion of Sensitive Information into Log File|https://cwe.mitre.org/data/definitions/532.html]
Affected products: vendor: n/a
product: Puppet Enterprise
Published: 2021-09-07T13:03:48.000Z
CVE-2021-27023 
A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007
Problem types: description: Unsafe HTTP Redirect
Affected products: vendor: n/a
product: Puppet Enterprise, Puppet Server, Puppet Agent
Published: 2021-11-18T14:33:18.000Z
CVE-2021-27024 
A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0
Problem types: description: Invalid Permissions Check
Affected products: vendor: n/a
product: Puppet Continuous Delivery for Puppet Enterprise (CD4PE)
Published: 2021-11-18T14:23:56.000Z
CVE-2021-27025 
A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.
Problem types: description: Silent Configuration Failure
Affected products: vendor: n/a
product: Puppet Enterprise, Puppet Agent
Published: 2021-11-18T14:30:36.000Z
CVE-2021-27026 
A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged
Problem types: description: Sensitive Information May be Logged
Affected products: vendor: n/a
product: Puppet Enterprise, Puppet Connect
Published: 2021-11-18T14:27:21.000Z
CVE-2021-27027 
An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure.
Problem types: description: Out-Of-Bounds Read Vulnerability
Affected products: vendor: n/a
product: Autodesk FBX Review
Published: 2021-04-19T15:08:48.000Z
CVE-2021-27028 
A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files.
Problem types: description: Memory Corruption - Generic
Affected products: vendor: n/a
product: Autodesk FBX Review
Published: 2021-04-19T15:09:01.000Z
CVE-2021-27029 
The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review version 1.5.0 and prior causing the application to crash leading to a denial of service.
Problem types: description: Untrusted Pointer Dereference Remote Code Execution Vulnerability
Affected products: vendor: n/a
product: Autodesk FBX Review
Published: 2021-04-19T15:10:08.000Z
CVE-2021-27030 
A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s Review causing it to run arbitrary code on the system.
Problem types: description: Directory Traversal Remote Code Execution Vulnerability
Affected products: vendor: n/a
product: Autodesk FBX Review
Published: 2021-04-19T15:10:21.000Z
CVE-2021-27031 
A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system.
Problem types: description: Use-After-Free Remote Code Execution Vulnerability
Affected products: vendor: n/a
product: Autodesk FBX Review
Published: 2021-04-19T15:10:45.000Z
CVE-2021-27032 
Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration and take ownership of the service.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: Autodesk Licensing Installer
Published: 2021-05-28T11:30:53.000Z
CVE-2021-27033 
A Double Free vulnerability allows remote attackers to execute arbitrary code on PDF files within affected installations of Autodesk Design Review 2018, 2017, 2013, 2012, 2011. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Problem types: description: Double Free
Affected products: vendor: n/a
product: Autodesk Design Review
Published: 2021-07-09T14:12:16.000Z
CVE-2021-27034 
A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code.
Problem types: description: Heap Overflow Vulnerability
Affected products: vendor: n/a
product: Autodesk Design Review
Published: 2021-07-09T14:16:05.000Z
CVE-2021-27035 
A maliciously crafted TIFF, TIF, PICT, TGA, or DWF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA or DWF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: Autodesk Design Review
Published: 2021-07-09T14:16:34.000Z
CVE-2021-27036 
A maliciously crafted PCX, PICT, RCL, TIF, BMP, PSD or TIFF file can be used to write beyond the allocated buffer while parsing PCX, PDF, PICT, RCL, BMP, PSD or TIFF files. This vulnerability can be exploited to execute arbitrary code
Problem types: description: Out-of-bounds Write
Affected products: vendor: n/a
product: Autodesk Design Review
Published: 2021-07-09T14:17:01.000Z
CVE-2021-27037 
A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malicious actors to execute arbitrary code.
Problem types: description: Use-After-Free Vulnerability
Affected products: vendor: n/a
product: Autodesk Design Review
Published: 2021-07-09T14:17:32.000Z
CVE-2021-27038 
A Type Confusion vulnerability in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can occur when processing a maliciously crafted PDF file. A malicious actor can leverage this to execute arbitrary code.
Problem types: description: Type Confusion RCE Vulnerability
Affected products: vendor: n/a
product: Autodesk Design Review
Published: 2021-07-09T14:17:59.000Z
CVE-2021-27039 
A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for based overflow. This vulnerability can be exploited to execute arbitrary code.
Problem types: description: Uninitialized Variable Vulnerability
Affected products: vendor: n/a
product: Autodesk Design Review
Published: 2021-07-09T14:18:21.000Z
CVE-2021-27040 
A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.
Problem types: description: Out-of-bound Read Vulnerability
Affected products: vendor: n/a
product: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
Published: 2021-06-25T12:41:07.000Z
CVE-2021-27041 
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code
Problem types: description: Out-of-bound Write Vulnerability
Affected products: vendor: n/a
product: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
Published: 2021-06-25T12:41:13.000Z
CVE-2021-27042 
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.
Problem types: description: Memory Corruption Vulnerability
Affected products: vendor: n/a
product: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
Published: 2021-06-25T12:41:19.000Z
CVE-2021-27043 
An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable full page heap in the application.
Problem types: description: Write-what-where Condition Vulnerabiliity
Affected products: vendor: n/a
product: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
Published: 2021-06-25T12:41:26.000Z
CVE-2021-27044 
A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through maliciously crafted DLL files or information disclosure.
Problem types: description: Out-Of-Bounds Read Vulnerability
Affected products: vendor: n/a
product: Autodesk FBX Review
Published: 2021-09-15T14:11:00.000Z
CVE-2021-27045 
A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF file. This vulnerability can be exploited to execute arbitrary code.
Problem types: description: Out-of-bound Read
Affected products: vendor: n/a
product: Autodesk Navisworks
Published: 2021-09-15T16:35:07.000Z
CVE-2021-27046 
A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution through maliciously crafted DLL files.
Problem types: description: Memory Corruption - Generic
Affected products: vendor: n/a
product: Autodesk Navisworks
Published: 2021-09-15T16:35:15.000Z
CVE-2021-27047 HEVC Video Extensions Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: HEVC Video Extensions
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:44:25.000Z
CVE-2021-27048 HEVC Video Extensions Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: HEVC Video Extensions
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:44:44.000Z
CVE-2021-27049 HEVC Video Extensions Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: HEVC Video Extensions
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:45:06.000Z
CVE-2021-27050 HEVC Video Extensions Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: HEVC Video Extensions
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:45:13.000Z
CVE-2021-27051 HEVC Video Extensions Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: HEVC Video Extensions
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:45:20.000Z
CVE-2021-27052 Microsoft SharePoint Server Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server 2016
cpes: cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Server 2019
cpes: cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2021-03-11T15:46:00.000Z
CVE-2021-27053 Microsoft Excel Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office Online Server
cpes: cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft Excel 2016
cpes: cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Excel 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Excel 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office Web Apps Server 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:46:11.000Z
CVE-2021-27054 Microsoft Excel Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office Web Apps Server 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2019 for Mac
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
vendor: Microsoft
product: Microsoft Office Online Server
cpes: cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft Excel 2016
cpes: cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2016
cpes: cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Excel 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Excel 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:46:24.000Z
CVE-2021-27055 Microsoft Visio Security Feature Bypass Vulnerability
Problem types: description: Security Feature Bypass
Affected products: vendor: Microsoft
product: Microsoft Visio 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:visio:2013:sp1:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visio 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:visio:2013:sp1:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visio 2016
cpes: cpe:2.3:a:microsoft:visio:2016:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visio 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:visio:2010:sp2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:48:18.000Z
CVE-2021-27056 Microsoft PowerPoint Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft PowerPoint 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:rt:*:*:*
vendor: Microsoft
product: Microsoft PowerPoint 2016
cpes: cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft PowerPoint 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:48:19.000Z
CVE-2021-27057 Microsoft Office Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2019 for Mac
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
vendor: Microsoft
product: Microsoft Office Online Server
cpes: cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft Excel 2016
cpes: cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2016
cpes: cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Excel 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Excel 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office Web Apps 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:48:21.000Z
CVE-2021-27058 Microsoft Office ClickToRun Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:48:22.000Z
CVE-2021-27059 Microsoft Office Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office 2016
cpes: cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.6
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-03-11T15:49:00.000Z