CVE-2021-38644

What this means for your business

• It affects Microsoft Mpeg-2 Video Extension. It matters if your company, or a supplier that handles your data, runs it.
• An attacker can use it only with access to the machine itself, without a login, but only after tricking someone into an action such as opening a file or a link.
• FIRST's prediction model gives it a 2% chance of attack attempts being seen in the next 30 days, ranking above 82% of all known flaws.

What to do

1. 1Check whether your company or your suppliers run Microsoft Mpeg-2 Video Extension, and which version. The affected versions are listed further down this page.
2. 2If you do, apply the vendor's fix. A patch or vendor advisory has been published.