CVE-2021-28465

HIGH

Web Media Extensions - Remote Code Execution via Out-of-bounds Write

Title source: llm

Web Media Extensions Remote Code Execution Vulnerability

Core 3

Core References

Patch, Vendor Advisory x_refsource_misc

Third Party Advisory x_refsource_misc

Third Party Advisory x_refsource_misc

CVSS v3 7.8

EPSS 0.0366

EPSS Percentile 88.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-787

Status published

Products (2)

Microsoft/Web Media Extensions 1.0.0.0 - 1.0.40831.0

microsoft/web_media_extensions

Published May 11, 2021

Tracked Since Feb 18, 2026