CVE Watch10 de ago. de 2026

CVE-2021-38647

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS

9.8

Crítica

EPSS

99.9%

p100

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: 15 de set. de 2021 · Última mod.: 10 de ago. de 2026

EPSS · 30d

99.9%EPSS · 30 dias99.9%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Open Management Infrastructure (OMI)

Vulnerabilidade

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

17 de nov. de 2021

Uso conhecido em ransomware

Sim

Descrição resumida

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-38647

Descrição técnica

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2021-386497.0 ALT

86.9%

KEV—76Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability87d CVE-2021-386487.8 ALT

96.0%

KEV—79Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability87d CVE-2021-386457.8 ALT

86.1%

KEV—76Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability87d