CVE-2021-28352

CVE-2021-28352 is a Remote Procedure Call Runtime Remote Code Execution vulnerability affecting various versions of Microsoft Windows and Windows Server. With a CVSS score of 8.8 (HIGH), it allows an unauthenticated attacker to achieve high impact on confidentiality, integrity, and availability over the network with low attack complexity. While it has a high FAUCET Risk Score of 90/100 and some media coverage, there is no evidence of active exploitation, nor are there public exploit modules available in Metasploit, Nuclei, or ExploitDB. The vulnerability is not listed in CISA's KEV catalog and has limited community discussion.