Live › vulnerability › CVE-2021-34448
Go to dashboardMicrosoft Windows Scripting Engine has a memory corruption flaw that CISA lists as actively exploited. An attacker who can get the affected engine to process crafted content can corrupt memory and may run code on the machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Windows | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the Microsoft Windows updates for CVE-2021-34448 per vendor instructions, as CISA requires.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2021-34448")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.