CVE-2021-31947
HighCVSS 7.8Exploitation Probability (EPSS)
High risk82th percentile - higher than 82% of all known CVEs
Summary
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to execute code on the victim's system.
Risk Assessment
Risk of taking control of the user's system after opening a malicious video file.
Recommendation
Install updates from Microsoft Store for HEVC Video Extensions.
Other vulnerabilities in HEVC Video Extensions
See all- CVE-2021-26902High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this vulnerability to execute arbitrary code on the system.
- CVE-2023-38170High
The vulnerability in HEVC Video Extensions allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2021-38661High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33778High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33777High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33776High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33775High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-27062High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
- CVE-2021-27061High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run arbitrary code in the context of the logged-in user.
- CVE-2021-27051High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
Original NVD description (English source)
HEVC Video Extensions Remote Code Execution Vulnerability