CVE-2021-31978

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Microsoft Defender Denial of Service Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jun 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-319797.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-31987.2By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. CVE-2021-319808.1Microsoft Intune Management Extension Remote Code Execution VulnerabilityCVE-2021-319828.8Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2021-319837.8Paint 3D Remote Code Execution VulnerabilityCVE-2021-319847.6Power BI Remote Code Execution VulnerabilityCVE-2021-319857.8Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-319866.8User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crasheCVE-2021-319877.5A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipCVE-2021-319888.8A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and CVE-2021-319895.3A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump CVE-2021-31999.8Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /..
CVE-2021-31978: Medium severity, CVSS 5.5 | Vulnix