CVE-2021-1647

CVE Enrichment

CVSS: 7.8 HIGH
EPSS: 39.65%
EPSS Percentile: 98.63%
CISA KEV: YES — Known Exploited Vulnerability

Description

Microsoft Defender Remote Code Execution Vulnerability

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 13-Jan-2021 03:15
Last Modified: 17-Jun-2026 10:32
EPSS Date: 2026-11-08

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CISA KEV Details

Date Added: 2021-11-03
Remediation Due: 2021-11-17
Known Ransomware Campaign Use: Unknown
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2021-1647

CNA Products / Version Status

Microsoft · Microsoft Security Essentials Source: CNA · [email protected]
Default status: unknown

N/A — affected

Platforms: Unknown
CPEs: cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*
Microsoft · Microsoft System Center 2012 Endpoint Protection Source: CNA · [email protected]
Default status: unknown

N/A — affected

Platforms: Unknown
CPEs: cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:-:*:*:*:*:*:*
Microsoft · Microsoft System Center 2012 R2 Endpoint Protection Source: CNA · [email protected]
Default status: unknown

N/A — affected

Platforms: Unknown
CPEs: cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:r2:*:*:*:*:*:*
Microsoft · Microsoft System Center Endpoint Protection Source: CNA · [email protected]
Default status: unknown

N/A — affected

Platforms: Unknown
CPEs: cpe:2.3:a:microsoft:system_center_endpoint_protection:-:*:*:*:*:*:*:*
Microsoft · Windows Defender Source: CNA · [email protected]
Default status: unknown

N/A — affected

Platforms: Windows 10 Version 1803 for 32-bit Systems, Windows 10 Version 1803 for x64-based Systems, Windows 10 Version 1803 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 1809 for ARM64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows 10 Version 20H2 for 32-bit Systems, Windows 10 Version 20H2 for ARM64-based Systems, Windows Server, version 20H2 (Server Core Installation), Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1, Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows RT 8.1, Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)
CPEs: cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*

Affected Products / Versions

microsoft / windows_defender Source: NVD CPE · affected
Version / affected range: -
cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*
microsoft / security_essentials Source: NVD CPE · affected
Version / affected range: -
cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*
microsoft / system_center_endpoint_protection Source: NVD CPE · affected
Version / affected range: -
cpe:2.3:a:microsoft:system_center_endpoint_protection:-:*:*:*:*:*:*:*
microsoft / system_center_endpoint_protection Source: NVD CPE · affected
Version / affected range: 2012
cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:-:*:*:*:*:*:*
microsoft / system_center_endpoint_protection Source: NVD CPE · affected
Version / affected range: 2012
cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:r2:*:*:*:*:*:*

References

Last enrichment sync: 09-Nov-2026 11:28
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

Another example for this is CVE-2021-1647, a CVSS 7.8 remote code execution (RCE) vulnerability published in January 2021 within the popular Microsoft Defender Anti-Malware Engine, allowing attackers to execute code on Why Endpoint Security Agents Alone Fall Short in Cloud Environments

CVE (1)

Malware (1)

Vendors (6)

Products (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.