CVE-2021-1647

Microsoft Defender contained an unpatched remote code execution vulnerability that was actively exploited in the wild.

Microsoft Defender had an unpatched remote code execution vulnerability that was actively exploited in the wild, allowing attackers to execute arbitrary code on systems. This failure matters to DIB organizations because it demonstrates the risk of relying on security software that is not promptly patched, potentially leading to system compromise and data breaches. Organizations should ensure all security software is regularly updated and monitored for known vulnerabilities.

Shame score — The vulnerability was unpatched and actively exploited in the wild, indicating a failure to address known security flaws promptly.