First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-38644

HighCVSS 7.8/10Last modified Aug 10, 2026

Description

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	MPEG-2 Video Extension	-

References

Timeline

Published: Sep 15, 2021
Last modified: Aug 10, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-386457.8Open Management Infrastructure Elevation of Privilege Vulnerability CVE-2021-386467.8Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability CVE-2021-386479.8Open Management Infrastructure (OMI) Remote Code Execution Vulnerability CVE-2021-386487.8Open Management Infrastructure Elevation of Privilege Vulnerability CVE-2021-386497.0Open Management Infrastructure Elevation of Privilege Vulnerability CVE-2021-386507.6Microsoft Office Spoofing Vulnerability CVE-2021-386517.6Microsoft SharePoint Server Spoofing Vulnerability CVE-2021-386527.6Microsoft SharePoint Server Spoofing Vulnerability CVE-2021-386537.8Microsoft Office Visio Remote Code Execution Vulnerability CVE-2021-386547.8Microsoft Office Visio Remote Code Execution Vulnerability CVE-2021-386557.8Microsoft Excel Remote Code Execution Vulnerability CVE-2021-386567.8Microsoft Word Remote Code Execution Vulnerability

CVE-2021-38644: High severity, CVSS 7.8 | Vulnix