First published: Tue May 11 2021(Updated: )
OLE Automation Remote Code Execution Vulnerability
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 10 | ||
Microsoft Windows 10 | =20h2 | |
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1803 | |
Microsoft Windows 10 | =1809 | |
Microsoft Windows 10 | =1909 | |
Microsoft Windows 10 | =2004 | |
Microsoft Windows 7 | =sp1 | |
Microsoft Windows 8.1 | ||
Microsoft Windows RT | ||
Microsoft Windows Server | =sp2 | |
Microsoft Windows Server | =r2-sp1 | |
Microsoft Windows Server | ||
Microsoft Windows Server | =r2 | |
Microsoft Windows Server 2016 | ||
Microsoft Windows Server 2016 | =20h2 | |
Microsoft Windows Server 2016 | =1909 | |
Microsoft Windows Server 2016 | =2004 | |
Microsoft Windows Server 2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-31194 is rated as critical and poses a significant risk of remote code execution.
To fix CVE-2021-31194, apply the latest security updates provided by Microsoft for affected Windows versions.
CVE-2021-31194 affects multiple Windows versions, including Windows 7, Windows 10, and Windows Server editions.
CVE-2021-31194 is classified as an OLE Automation remote code execution vulnerability.
Yes, CVE-2021-31194 can be exploited remotely by an attacker to execute arbitrary code on the affected system.