CVE-2021-1647: Microsoft Defender Remote Code Execution Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 39.4% chance of exploitation in the next 30 days.

Microsoft Defender Remote Code Execution Vulnerability

Affected products

• Microsoft Security Essentials: affected versions not specified
• Microsoft System Center Endpoint Protection: affected versions not specified; version 2012 only
• Microsoft Windows Defender: affected versions not specified

Published 2021-01-12. Last modified 2026-06-17.