CVE-2021-31980

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Microsoft Intune Management Extension Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftIntune management extension>= 1.0.0.0, < 1.41.203.0

References

Timeline

Published
Jun 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-319828.8Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2021-319837.8Paint 3D Remote Code Execution VulnerabilityCVE-2021-319847.6Power BI Remote Code Execution VulnerabilityCVE-2021-319857.8Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-319866.8User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crasheCVE-2021-319877.5A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipCVE-2021-319888.8A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and CVE-2021-319895.3A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump CVE-2021-31999.8Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. CVE-2021-319967.5An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge().CVE-2021-319977.8A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalateCVE-2021-319987.8A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2,
CVE-2021-31980: High severity, CVSS 8.1 | Vulnix