CVE-2021-31166

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

HTTP Protocol Stack Remote Code Execution Vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
May 11, 2021
Last modified
Jun 17, 2026
Added to CISA KEV
Apr 6, 2022
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-311677.8Windows Container Manager Service Elevation of Privilege VulnerabilityCVE-2021-311687.8Windows Container Manager Service Elevation of Privilege VulnerabilityCVE-2021-311697.8Windows Container Manager Service Elevation of Privilege VulnerabilityCVE-2021-311707.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2021-311714.1Microsoft SharePoint Information Disclosure VulnerabilityCVE-2021-311727.1Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-311735.3Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2021-311745.5Microsoft Excel Information Disclosure VulnerabilityCVE-2021-311757.8Microsoft Office Remote Code Execution VulnerabilityCVE-2021-311767.8Microsoft Office Remote Code Execution VulnerabilityCVE-2021-311777.8Microsoft Office Remote Code Execution VulnerabilityCVE-2021-311785.5Microsoft Office Information Disclosure Vulnerability
CVE-2021-31166: Critical severity, CVSS 9.8 | Vulnix