CVE-2021-31985

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Microsoft Defender Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Malware Protection Engine	>= 1.1.0.0, < Version 1.1.18200.3

References

http://packetstormsecurity.com/files/163443/MpEngine-ASProtect-Embedded-Runtime-DLL-Memory-Corruption.htmlThird Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31985Patch, Vendor Advisory
http://packetstormsecurity.com/files/163443/MpEngine-ASProtect-Embedded-Runtime-DLL-Memory-Corruption.htmlThird Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31985Patch, Vendor Advisory

Timeline

Published: Jun 8, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-319866.8User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashe CVE-2021-319877.5A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recip CVE-2021-319888.8A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and CVE-2021-319895.3A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump CVE-2021-31999.8Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. CVE-2021-319967.5An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge().CVE-2021-319977.8A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate CVE-2021-319987.8A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2,CVE-2021-319998.8A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the clu CVE-2021-32003.3Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, c CVE-2021-320007.1A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterpr CVE-2021-320016.5K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confident