NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2021-38666

CVSS 3.1: 8.8 high
EPSS: 15%p97
Published: Nov 10, 2021 · Nov 10, 2021
Modified: Aug 19, 2026

Analyze CVE-2021-38666 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Remote Desktop Client Remote Code Execution Vulnerability

Vendors: microsoft

Products: windows 10, windows 11, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019, windows server 2022

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (15.1%)

In the news

4 stories

Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0

The Hacker NewsNov 10, 06:24 UTC · Nov 10, 2021VulnerabilityExploitedCVE-2021-42321 CVE-2021-42292 CVE-2021-43208+164

60

Microsoft Patch Tuesday, November 2021 Edition

Krebs on SecurityNov 10, 01:43 UTC · Nov 10, 2021VulnerabilityExploitedCVE-2021-42292 CVE-2021-42321 CVE-2021-38631+22

60

Microsoft Patch Tuesday for Nov. 2021 — Snort rules and prominent vulnerabilities

Cisco TalosNov 9, 20:26 UTC · Nov 9, 2021VulnerabilityExploitedCVE-2021-42292 CVE-2021-38666 CVE-2021-42298+12 · 1 read

60

Microsoft patches actively exploited Exchange, Excel zero-days (CVE-2021-42321, CVE-2021-42292)

Help Net SecurityNov 9, 00:00 UTC · Nov 9, 2021Exploit / PoCExploitedCVE-2021-42321 CVE-2021-42292 CVE-2021-38666+24 · 1 read

60