Back to CVE Browser

CVE-2021-1647

Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score63.8890%

EPSS Percentile86.67th

PublishedJan 12, 2021

Last ModifiedOct 30, 2025

Vulnerability Description

Microsoft Defender Remote Code Execution Vulnerability

Affected Platforms (CPE)

📦

Microsoft

Windows Defender

All versions

📦

Microsoft

Security Essentials

All versions

📦

Microsoft

System Center Endpoint Protection

All versions

📦

Microsoft

System Center Endpoint Protection

= 2012

📦

Microsoft

System Center Endpoint Protection

= 2012

References & Advisories

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1647

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1647

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1647

Related Vulnerabilities

CVE-2006-52709.3

Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, an...

CVE-2018-09868.8

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially craft...

CVE-2021-404448.8

<p>Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft...

CVE-2020-07637.8

An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit ...