auren-research/cyber-sec huggingface dataset:
cveID: CVE-2020-15999
vendorProject: Google
product: Chrome FreeType
vulnerabilityName: Google Chrome FreeType Heap Buffer Overflow Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-15999
cwes: CWE-787
cveID: CVE-2021-21166
vendorProject: Google
product: Chromium
vulnerabilityName: Google Chromium Race Condition Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-21166
cwes: CWE-122
CWE-362
cveID: CVE-2020-16017
vendorProject: Google
product: Chrome
vulnerabilityName: Google Chrome Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chrome contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. 
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-16017
cwes: CWE-416
cveID: CVE-2021-37976
vendorProject: Google
product: Chromium
vulnerabilityName: Google Chromium Information Disclosure Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-37976
cwes: CWE-862
cveID: CVE-2020-16009
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Type Confusion Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-16009
cwes: CWE-787
CWE-843
cveID: CVE-2021-30632
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Out-of-Bounds Write Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30632
cwes: CWE-122
cveID: CVE-2020-16013
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Incorrect Implementation Vulnerabililty
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-16013
cwes: CWE-787
cveID: CVE-2021-30633
vendorProject: Google
product: Chromium Indexed DB API
vulnerabilityName: Google Chromium Indexed DB API Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30633
cwes: CWE-416
cveID: CVE-2021-21148
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Heap Buffer Overflow Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-21148
cwes: CWE-122
cveID: CVE-2021-37973
vendorProject: Google
product: Chromium Portals
vulnerabilityName: Google Chromium Portals Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-37973
cwes: CWE-416
cveID: CVE-2021-30551
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Type Confusion Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30551
cwes: CWE-122
CWE-843
cveID: CVE-2021-37975
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-37975
cwes: CWE-416
cveID: CVE-2020-6418
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Type Confusion Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-6418
cwes: CWE-843
cveID: CVE-2021-30554
vendorProject: Google
product: Chromium WebGL
vulnerabilityName: Google Chromium WebGL Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30554
cwes: CWE-416
cveID: CVE-2021-21206
vendorProject: Google
product: Chromium Blink
vulnerabilityName: Google Chromium Blink Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-21206
cwes: CWE-416
cveID: CVE-2021-38000
vendorProject: Google
product: Chromium Intents
vulnerabilityName: Google Chromium Intents Improper Input Validation Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-38000
cwes: CWE-20
cveID: CVE-2021-38003
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-38003
cwes: CWE-122
CWE-755
cveID: CVE-2021-21224
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Type Confusion Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-21224
cwes: CWE-843
cveID: CVE-2021-21193
vendorProject: Google
product: Chromium Blink
vulnerabilityName: Google Chromium Blink Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-21193
cwes: CWE-416
cveID: CVE-2021-21220
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Improper Input Validation Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-21220
cwes: CWE-20
CWE-122
cveID: CVE-2021-30563
vendorProject: Google
product: Chromium V8
vulnerabilityName: Google Chromium V8 Type Confusion Vulnerability
dateAdded: 2021-11-03
shortDescription: Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30563
cwes: CWE-122
CWE-843
cveID: CVE-2020-4430
vendorProject: IBM
product: Data Risk Manager
vulnerabilityName: IBM Data Risk Manager Directory Traversal Vulnerability
dateAdded: 2021-11-03
shortDescription: IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-4430
cwes: CWE-22
cveID: CVE-2020-4427
vendorProject: IBM
product: Data Risk Manager
vulnerabilityName: IBM Data Risk Manager Security Bypass Vulnerability
dateAdded: 2021-11-03
shortDescription: IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-4427
cveID: CVE-2020-4428
vendorProject: IBM
product: Data Risk Manager
vulnerabilityName: IBM Data Risk Manager Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-4428
cwes: CWE-78
cveID: CVE-2019-4716
vendorProject: IBM
product: Planning Analytics
vulnerabilityName: IBM Planning Analytics Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-4716
cwes: CWE-94
cveID: CVE-2016-3715
vendorProject: ImageMagick
product: ImageMagick
vulnerabilityName: ImageMagick Arbitrary File Deletion Vulnerability
dateAdded: 2021-11-03
shortDescription: ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-3715
cwes: CWE-284
cveID: CVE-2016-3718
vendorProject: ImageMagick
product: ImageMagick
vulnerabilityName: ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
dateAdded: 2021-11-03
shortDescription: ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-3718
cwes: CWE-20
cveID: CVE-2020-15505
vendorProject: Ivanti
product: MobileIron Multiple Products
vulnerabilityName: Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Ivanti MobileIron's Core & Connector, Sentry, and Monitor and Reporting Database (RDB) products contain an unspecified vulnerability that allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-15505
cwes: CWE-706
cveID: CVE-2021-30116
vendorProject: Kaseya
product: Virtual System/Server Administrator (VSA)
vulnerabilityName: Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability
dateAdded: 2021-11-03
shortDescription: Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30116
cwes: CWE-522
cveID: CVE-2020-7961
vendorProject: Liferay
product: Liferay Portal
vulnerabilityName: Liferay Portal Deserialization of Untrusted Data Vulnerability
dateAdded: 2021-11-03
shortDescription: Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-7961
cwes: CWE-502
cveID: CVE-2021-23874
vendorProject: McAfee
product: McAfee Total Protection (MTP)
vulnerabilityName: McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
dateAdded: 2021-11-03
shortDescription: McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-23874
cwes: CWE-284
cveID: CVE-2021-22506
vendorProject: Micro Focus
product: Micro Focus Access Manager
vulnerabilityName: Micro Focus Access Manager Information Leakage Vulnerability
dateAdded: 2021-11-03
shortDescription: Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-22506
cveID: CVE-2021-22502
vendorProject: Micro Focus
product: Operation Bridge Reporter (OBR)
vulnerabilityName: Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Micro Focus Operation Bridge Report (OBR) contains an unspecified vulnerability that allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-22502
cwes: CWE-20
CWE-78
cveID: CVE-2014-1812
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2014-1812
cwes: CWE-255
cveID: CVE-2021-38647
vendorProject: Microsoft
product: Open Management Infrastructure (OMI)
vulnerabilityName: Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-38647
cwes: CWE-1390
cveID: CVE-2016-0167
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-0167
cwes: CWE-264
cveID: CVE-2020-0878
vendorProject: Microsoft
product: Edge and Internet Explorer
vulnerabilityName: Microsoft Edge and Internet Explorer Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-0878
cwes: CWE-787
cveID: CVE-2021-31955
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Kernel Information Disclosure Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-31955
cwes: CWE-497
cveID: CVE-2021-1647
vendorProject: Microsoft
product: Defender
vulnerabilityName: Microsoft Defender Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-1647
cwes: CWE-122
CWE-1285