CVE-2021-1647

Published Jan 12, 2021

Last updated a month ago

Overview

Description
Microsoft Defender Remote Code Execution Vulnerability
Source
secure@microsoft.com
NVD status
Analyzed

Social media

Hype score
Not currently trending

Risk scores

CVSS 3.1

Type
Primary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
7.2
Impact score
10
Exploitability score
3.9
Vector string
AV:L/AC:L/Au:N/C:C/I:C/A:C

Known exploits

Data from CISA

Vulnerability name
Microsoft Defender Remote Code Execution Vulnerability
Exploit added on
Nov 3, 2021
Exploit action due
Nov 17, 2021
Required action
Apply updates per vendor instructions.

Weaknesses

nvd@nist.gov
NVD-CWE-noinfo

Configurations