CVE-2021-1647: Microsoft Defender Remote Code Execution Vulnerability
First published: Tue Jan 12 2021(Updated: )
Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| =20h2 | ||
| =1607 | ||
| =1803 | ||
| =1809 | ||
| =1909 | ||
| =2004 | ||
| =sp1 | ||
| =sp2 | ||
| =r2-sp1 | ||
| =r2 | ||
| =20h2 | ||
| =1909 | ||
| =2004 | ||
| =2012 | ||
| =2012-r2 | ||
| Microsoft Windows Defender | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =20h2 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =2004 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows RT 8.1 | ||
| Microsoft Windows Server 2008 | =sp2 | |
| Microsoft Windows Server 2008 | =r2-sp1 | |
| Microsoft Windows Server 2012 | ||
| Microsoft Windows Server 2012 | =r2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =20h2 | |
| Microsoft Windows Server 2016 | =1909 | |
| Microsoft Windows Server 2016 | =2004 | |
| Microsoft Windows Server 2019 | ||
| Microsoft Security Essentials | ||
| Microsoft System Center Endpoint Protection | ||
| Microsoft System Center Endpoint Protection | =2012 | |
| Microsoft System Center Endpoint Protection | =2012-r2 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-1647?
CVE-2021-1647 is a vulnerability in Microsoft Defender that allows for remote code execution.
How severe is CVE-2021-1647?
CVE-2021-1647 has a severity rating of 7.8 (high).
Which software is affected by CVE-2021-1647?
The affected software includes Microsoft Defender, Microsoft Windows Defender, Microsoft Windows 10, Microsoft Windows 7, Microsoft Windows 8.1, Microsoft Windows RT 8.1, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Security Essentials, and Microsoft System Center Endpoint Protection.
How do I fix CVE-2021-1647?
To fix CVE-2021-1647, apply the security updates provided by Microsoft.
Where can I find more information about CVE-2021-1647?
You can find more information about CVE-2021-1647 on the Microsoft Security Guidance Advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1647
- collector/mitre-cve
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/author
- agent/softwarecombine
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/title
- agent/severity
- agent/remedy
- agent/weakness
- agent/references
- agent/tags
- agent/description
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft defender
- canonical/microsoft windows defender
- canonical/microsoft windows 10
- version/microsoft windows 10/20h2
- version/microsoft windows 10/1607
- version/microsoft windows 10/1803
- version/microsoft windows 10/1809
- version/microsoft windows 10/1909
- version/microsoft windows 10/2004
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows 8.1
- canonical/microsoft windows rt 8.1
- canonical/microsoft windows server 2008
- version/microsoft windows server 2008/sp2
- version/microsoft windows server 2008/r2-sp1
- canonical/microsoft windows server 2012
- version/microsoft windows server 2012/r2
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/20h2
- version/microsoft windows server 2016/1909
- version/microsoft windows server 2016/2004
- canonical/microsoft windows server 2019
- canonical/microsoft security essentials
- canonical/microsoft system center endpoint protection
- version/microsoft system center endpoint protection/2012
- version/microsoft system center endpoint protection/2012-r2