CVE-2021-42298

HIGH EXPLOITED

Microsoft Malware Protection Engine < 1.1.18700.3 - Remote Code Execution

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2021-42298 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

Microsoft Defender Remote Code Execution Vulnerability

References (1)

Core 1
Core References
Mitigation, Patch, Vendor Advisory x_refsource_misc
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42298

Scores

CVSS v3 7.8
EPSS 0.0548
EPSS Percentile 91.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2022-11-30
CWE
CWE-94
Status published
Products (1)
microsoft/malware_protection_engine < 1.1.18700.3
Published Nov 10, 2021
Tracked Since Feb 18, 2026