Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2021-27085

CVE-2021-27085HIGH

Microsoft Internet Explorer 11 — Internet Explorer Remote Code Execution Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  C  L  H  L    8.8   .0545   92.5   YES

AFFECTED
  Product               Versions  Fixed
  Internet Explorer 11  1.0.0 –   —

TIMELINE
  Feb 10  Reserved by microsoft
  Nov 3   Added to CISA KEV, remediation due 2021-11-17
  Nov 3   Published (CNA: microsoft)

CNA: microsoft · CVSS v3.1 · 3 references · NVD status: Analyzed · KEV due November 17, 2021

Description

Internet Explorer Remote Code Execution Vulnerability

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
February 10, 2021	Reserved	Reserved by microsoft
November 3, 2021	KEV ADDED	Added to CISA KEV, remediation due 2021-11-17
November 3, 2021	Published	Published (CNA: microsoft)

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Microsoft	Internet Explorer 11	—	1.0.0	—

References (3)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27085 [Patch, Vendor Advisory]
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27085 [Patch, Vendor Advisory]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27085 [US Government Resource]

Authoritative record: CVE-2021-27085 at cve.org

Vendors: microsoft

About this page