CVE-2021-42275

HighCVSS 8.8

Published: 10/11/2021(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.91%

78th percentile - higher than 78% of all known CVEs

Summary

Microsoft COM for Windows Remote Code Execution Vulnerability. An attacker could exploit this vulnerability to execute code remotely on the system.

Risk Assessment

The risk to the organization is the possibility of remote system compromise, leading to data breaches or malware installation.

Recommendation

It is recommended to install the security update released by Microsoft for COM for Windows as soon as possible.

Other vulnerabilities in Microsoft COM for Windows

CVE-2018-0824HighActively exploited
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Original NVD description (English source)

Microsoft COM for Windows Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS