First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-24089

HighCVSS 7.8/10Last modified Aug 19, 2026

Description

HEVC Video Extensions Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	HEVC Video Extensions	>= 1.0.0, < 1.0.40204.0

References

Timeline

Published: Mar 11, 2021
Last modified: Aug 19, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-24098.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prio CVE-2021-240907.8Windows Error Reporting Elevation of Privilege Vulnerability CVE-2021-240917.8Windows Camera Codec Pack Remote Code Execution Vulnerability CVE-2021-240927.8Microsoft Defender Elevation of Privilege Vulnerability CVE-2021-240938.8Windows Graphics Component Remote Code Execution Vulnerability CVE-2021-240949.8Windows TCP/IP Remote Code Execution Vulnerability CVE-2021-240957.0DirectX Elevation of Privilege Vulnerability CVE-2021-240967.8Windows Kernel Elevation of Privilege Vulnerability CVE-2021-240985.5Windows Console Driver Denial of Service Vulnerability CVE-2021-240996.5Skype for Business and Lync Denial of Service Vulnerability CVE-2021-24104.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 an CVE-2021-241005.0Microsoft Edge for Android Information Disclosure Vulnerability

CVE-2021-24089: High severity, CVSS 7.8 | Vulnix