← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2021-43209 · published 10 November 2021
CVE-2021-43209: Microsoft 3d viewer vulnerability
Microsoft · 3d Viewer
3D Viewer Remote Code Execution Vulnerability
7.8 CVSS 3.1 High EPSS 6.8% · top 6.2%
7.8CVSS 3.1 base score, v2 6.8
6.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References
19 Aug 2026Last modified by NVD
Description
3D Viewer Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43209 | |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43209 | PatchVendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-21-909/ | Third Party AdvisoryVDB Entry |
Track CVE-2021-43209 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
7.8CVE-2023-36760Microsoft 3d viewer use after free vulnerability3D Viewer Remote Code Execution VulnerabilityEPSS 0.68%7.8CVE-2023-36740Microsoft 3d viewer heap-based buffer overflow vulnerability3D Viewer Remote Code Execution VulnerabilityEPSS 0.68%7.8CVE-2023-36739Microsoft 3d viewer heap-based buffer overflow vulnerability3D Viewer Remote Code Execution VulnerabilityEPSS 0.68%7.8CVE-2021-43208Microsoft 3d viewer code injection vulnerability3D Viewer Remote Code Execution VulnerabilityEPSS 4.3%7.8CVE-2021-31942Microsoft 3d viewer vulnerability3D Viewer Remote Code Execution VulnerabilityEPSS 2.2%7.8CVE-2021-31943Microsoft 3d viewer vulnerability3D Viewer Remote Code Execution VulnerabilityEPSS 2.4%7.8CVE-2020-17003Microsoft 3d viewer memory buffer overflow vulnerability<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully explo…EPSS 4.2%7.8CVE-2020-16918Microsoft 365 apps out-of-bounds write vulnerability<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully explo…EPSS 3.9%
Source: NIST National Vulnerability Database (record CVE-2021-43209), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
