CVE-2021-42275

HighCVSS 8.8/10Last modified Aug 19, 2026

Description

Microsoft COM for Windows Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Nov 10, 2021
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-422767.8Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2021-422775.5Diagnostics Hub Standard Collector Elevation of Privilege VulnerabilityCVE-2021-422787.5Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2021-422794.2Chakra Scripting Engine Memory Corruption VulnerabilityCVE-2021-42287.4Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTPCVE-2021-422805.5Windows Feedback Hub Elevation of Privilege VulnerabilityCVE-2021-422827.5Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2021-422838.8NTFS Elevation of Privilege VulnerabilityCVE-2021-422846.8Windows Hyper-V Denial of Service VulnerabilityCVE-2021-422857.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-422867.8Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege VulnerabilityCVE-2021-422877.5Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-42275: High severity, CVSS 8.8 | Vulnix