CVE Catalog

CVE-2021-26435

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
4.81%

91th percentile - higher than 91% of all known CVEs

Summary

Memory corruption vulnerability in the Windows Scripting Engine. It could lead to remote code execution when processing malicious scripts.

Risk Assessment

Risk of system compromise by running a malicious script in a browser or application.

Recommendation

Install Windows security updates.

Original NVD description (English source)

Windows Scripting Engine Memory Corruption Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS