CVE-2021-41330

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.2237
MicrosoftWindows Server 2019>= 10.0.0, < 10.0.17763.2237
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.0, < 10.0.17763.2237
MicrosoftWindows 10 Version 1909>= 10.0.0, < 10.0.18363.1854
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.1288
MicrosoftWindows 10 Version 2004>= 10.0.0, < 10.0.19041.1288
MicrosoftWindows Server version 2004>= 10.0.0, < 10.0.19041.1288
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.1288
MicrosoftWindows Server version 20H2>= 10.0.0, < 10.0.19042.1288

References

Timeline

Published
Oct 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-413317.8Windows Media Audio Decoder Remote Code Execution VulnerabilityCVE-2021-413326.5Windows Print Spooler Information Disclosure VulnerabilityCVE-2021-413337.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-413347.0Windows Desktop Bridge Elevation of Privilege VulnerabilityCVE-2021-413357.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-413365.5Windows Kernel Information Disclosure VulnerabilityCVE-2021-413374.9Active Directory Security Feature Bypass VulnerabilityCVE-2021-413385.5Windows AppContainer Firewall Rules Security Feature Bypass VulnerabilityCVE-2021-413394.7Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVE-2021-41344.9The Fancy Product Designer WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the ID paramCVE-2021-413407.8Windows Graphics Component Remote Code Execution VulnerabilityCVE-2021-413426.8Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-41330: High severity, CVSS 7.8 | Vulnix