{"schemaVersion":3,"id":"CVE-2021-1713","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Microsoft Excel Remote Code Execution Vulnerability","dates":{"published":"2021-01-12T19:42:42.000Z","modified":"2024-10-08T16:17:43.099Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03336,"percentile":0.8849,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.247,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.03089},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03336,"percentile":0.8849}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03089,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03336,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03336,"percentile":0.8849}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"microsoft","product":"365_apps","name":"365 apps","label":"365_apps","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/365_apps"},{"vendor":"microsoft","product":"excel","name":"excel","label":"excel","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2010:sp2","noFixRecorded":false,"fixedIn":null},{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null},{"text":"2016","noFixRecorded":false,"fixedIn":null}],"versionsText":"2010:sp2 | 2013:sp1 | 2016","eol":null,"hubHref":"/vendor/microsoft/excel"},{"vendor":"microsoft","product":"microsoft 365 apps for enterprise","name":"Microsoft 365 Apps for Enterprise","label":"microsoft 365 apps for enterprise","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_365_apps_for_enterprise"},{"vendor":"microsoft","product":"microsoft excel 2010 service pack 2","name":"Microsoft Excel 2010 Service Pack 2","label":"microsoft excel 2010 service pack 2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.0.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.0.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/microsoft_excel_2010_service_pack_2"},{"vendor":"microsoft","product":"microsoft excel 2013 service pack 1","name":"Microsoft Excel 2013 Service Pack 1","label":"microsoft excel 2013 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 15.0.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 15.0.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/microsoft_excel_2013_service_pack_1"},{"vendor":"microsoft","product":"microsoft excel 2016","name":"Microsoft Excel 2016","label":"microsoft excel 2016","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/microsoft_excel_2016"},{"vendor":"microsoft","product":"microsoft office 2019","name":"Microsoft Office 2019","label":"microsoft office 2019","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_2019"},{"vendor":"microsoft","product":"microsoft office 2019 for mac","name":"Microsoft Office 2019 for Mac","label":"microsoft office 2019 for mac","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_2019_for_mac"},{"vendor":"microsoft","product":"microsoft office online server","name":"Microsoft Office Online Server","label":"microsoft office online server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < publication","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_online_server"},{"vendor":"microsoft","product":"microsoft office web apps server 2013 service pack 1","name":"Microsoft Office Web Apps Server 2013 Service Pack 1","label":"microsoft office web apps server 2013 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 15.0.1, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 15.0.1, < publication","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_web_apps_server_2013_service_pack_1"},{"vendor":"microsoft","product":"office","name":"office","label":"office","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2019","noFixRecorded":false,"fixedIn":null}],"versionsText":"2019","eol":{"isEol":true,"eolDate":"2025-10-14T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"2019","label":"2019","eolFrom":"2025-10-14T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"office","label":"Microsoft Office","category":"app"}},"hubHref":"/vendor/microsoft/office"},{"vendor":"microsoft","product":"office_online_server","name":"office online server","label":"office_online_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/office_online_server"},{"vendor":"microsoft","product":"office_web_apps_server","name":"office web apps server","label":"office_web_apps_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"2013:sp1","eol":null,"hubHref":"/vendor/microsoft/office_web_apps_server"}],"affectedCount":13,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1713","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1713","hostname":"msrc.microsoft.com","tags":["Vendor Advisory"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1713","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1713","hostname":"portal.msrc.microsoft.com","tags":["X Refsource MISC","X Transferred"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-01-12T19:42:42.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-10-08T16:17:43.099Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T21:22:41.733Z","stale":false,"partial":false}}