HIGHCVSS v3.1 7.8Actively exploited · CISA KEV since 2021-11-03Vulnerability

CVE-2021-1647

Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.

Properties

Vulnerability name
Microsoft Defender Remote Code Execution Vulnerability
Epss score
0.39653
Last seen
2026-10-19T12:00:27+00:00
Due date
2021-11-17
Exploited euvd since
2021-11-03T00:00:00+00:00
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2021-11-03
Score
7.8
Euvd base score version
3.1
Euvd vendor
Microsoft
In Signal since
initial import (Sep 2026)
Euvd base score
7.8
Vendor project
Microsoft
Content hash
615a94be7bc51cdbbe6b81246c7cdf76b57519794361c37543eb46538d82b942
Published at
2021-01-12T20:15:30.727
Euvd updated
2025-10-21T23:35:30+00:00
Last modified
2026-06-17T03:32:13.953
Euvd epss pct
39.65
Epss percentile
0.98608
Licence
FIRST EPSS: free to use; attribution requested in publications or products (FAQ)

Related Entities (26 · showing 22)

AFFECTS_PRODUCT (24 · showing 20)

→[Product]cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:r2:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
→[Product]cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:microsoft:system_center_endpoint_protection:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
→[Product]cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_server_20h2:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_server_2004:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

DESCRIBES (1)

←[KEVEntry]Microsoft Defender Remote Code Execution Vulnerability

INVOLVES (1)

←[Signal]kev_added · 2021-11-03

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2021-1647 (CVSS v3.1 7.8) — Ninja Signal Threat Intelligence | Ninja Signal