Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Microsoft Defender Remote Code Execution Vulnerability

CVE-2021-34522 · published 5 years ago
Summary

A vulnerability in Microsoft Defender allows attackers to run malicious code on a victim's device, potentially leading to data theft or system compromise. This affects users who have Microsoft Defender installed on their devices, particularly those using it to scan and protect their systems. To mitigate this risk, users should ensure their Microsoft Defender is updated to the latest version.

What to do
  • Update microsoft microsoft malware protection engine to version 1.1.18242.0 or later.
  • Update microsoft malware_protection_engine to version 1.1.18242.0 or later.
Affected software
VendorProductAffected versions
microsoft microsoft malware protection engine < 1.1.18242.0
microsoft malware_protection_engine < 1.1.18242.0
cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*
Original advisory text
Microsoft Defender Remote Code Execution Vulnerability
Microsoft Defender Remote Code Execution Vulnerability
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
3% chance of attack within 30 days
Timeline
Published14 Jul 2021
Updated30 Oct 2026
First seen10 Aug 2026
Sources
CVE-2021-34522 · NVD
CVE-2021-34522 · MITRE
Track software like this
Free during beta