peter bassill · operator
$ cve CVE-2021-26424 JSON

CVE-2021-26424

9.9
CRITICAL · CVSS 3.1 · EPSS 61.1% (pctl 99)

Patch early

EPSS 61.1% — above the 10% action threshold.

Description

Windows TCP/IP Remote Code Execution Vulnerability

Scoring

CVSS9.9 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS61.13% — more likely to be exploited than 99% of all CVEs
On CISA KEVno
Public exploitnone known
Published2021-08-12
Last modified2026-08-10

Affected (8)

VendorProduct
microsoftwindows 10
microsoftwindows 7
microsoftwindows 8.1
microsoftwindows rt 8.1
microsoftwindows server 2008
microsoftwindows server 2012
microsoftwindows server 2016
microsoftwindows server 2019

References

→ the Explorer  ·  watch your stack  ·  NVD