CVE-2021-34448

MediumCVSS 6.8/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Scripting Engine Memory Corruption Vulnerability

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jul 16, 2021
Last modified
Aug 10, 2026
Added to CISA KEV
Nov 3, 2021
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-344497.0Win32k Elevation of Privilege VulnerabilityCVE-2021-34457.5A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code exCVE-2021-344508.5Windows Hyper-V Remote Code Execution VulnerabilityCVE-2021-344515.3Microsoft Office Online Server Spoofing VulnerabilityCVE-2021-344527.8Microsoft Word Remote Code Execution VulnerabilityCVE-2021-344537.5Microsoft Exchange Server Denial of Service VulnerabilityCVE-2021-344545.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2021-344557.8Windows File History Service Elevation of Privilege VulnerabilityCVE-2021-344567.8Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2021-344575.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2021-344589.9Windows Kernel Remote Code Execution VulnerabilityCVE-2021-344597.8Windows AppContainer Elevation Of Privilege Vulnerability
CVE-2021-34448: Medium severity, CVSS 6.8 | Vulnix