CVE-2021-38644

CVE-2021-38644 is a Remote Code Execution vulnerability affecting the Microsoft MPEG-2 Video Extension. With a CVSS score of 7.8 (HIGH), it allows an unauthenticated attacker to achieve high impact on confidentiality, integrity, and availability through user interaction, typically via a malicious file. Despite its severity, there is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one article from BleepingComputer mentioning it as part of a larger Patch Tuesday update.