CVE-2021-38112

In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution…

published September 22, 2021

CVSS
—
EPSS
7%
Percentile
94.5
In the wild
Unconfirmed
What it is

In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF) --gpu-launcher argument. This is fixed in 3.1.9.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07479 · 94.5th percentile
Published
2021-09-22T01:54Z
EPSS history
Timeline
  • 22 SEP 01:54Z
    In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution…
    cvelistv5