{"vulnerability": "CVE-2021-3866", "sightings": [{"uuid": "5f449763-7d54-4992-aefd-dfcf08208c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38666", "type": "published-proof-of-concept", "source": "https://t.me/cKure/8443", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Remote Deserialization Bug in Microsoft's RDP Client through Smart Card Extension (CVE-2021-38666)\n\nhttps://thalium.github.io/blog/posts/deserialization-bug-through-rdp-smart-card-extension/", "creation_timestamp": "2021-12-18T14:12:53.000000Z"}, {"uuid": "490344e2-12e9-4ac0-96cf-383ec3383630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3866", "type": "seen", "source": "https://t.me/cibsecurity/35914", "content": "\u203c CVE-2021-3866 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository zulip/zulip prior to main.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-20T14:16:38.000000Z"}, {"uuid": "e9e68ebe-695d-4ebb-bbc8-1fc6c623059f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38662", "type": "seen", "source": "https://t.me/cibsecurity/30478", "content": "\u203c CVE-2021-41343 \u203c\n\nWindows Fast FAT File System Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38662.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-13T07:32:27.000000Z"}, {"uuid": "8edac825-5cf8-4855-8992-6b4db20d3441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38666", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/1170", "content": "#exploit\n\n+ CVE-2021-37999:\nGoogle Chrome NTP XSS via Google Search CSRF\nhttps://bugs.chromium.org/p/chromium/issues/detail?id=1251541\n\n+ CVE-2021-38666:\nRemote Desktop Client RCE Vulnerability\nhttps://github.com/DarkSprings/CVE-2021-38666-poc\n\n@BlueRedTeam", "creation_timestamp": "2021-11-13T07:15:28.000000Z"}, {"uuid": "020cde6d-946a-4f19-ad35-7fb605fc25ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38666", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/5908", "content": "Remote Deserialization Bug in Microsoft's RDP Client through Smart Card Extension (CVE-2021-38666) Bounty award: $5,000.\nhttps://thalium.github.io/blog/posts/deserialization-bug-through-rdp-smart-card-extension/", "creation_timestamp": "2021-12-30T20:50:54.000000Z"}, {"uuid": "0ac0696f-4069-4cd8-96fb-74cf152e843b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38666", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1917", "content": "Remote Deserialization Bug in Microsoft's RDP Client through Smart Card Extension (CVE-2021-38666) https://thalium.github.io/blog/posts/deserialization-bug-through-rdp-smart-card-extension/", "creation_timestamp": "2026-08-03T04:15:06.899019Z"}, {"uuid": "c4454c26-6da3-4a5d-b350-3b7da83ad092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38666", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1917", "content": "Remote Deserialization Bug in Microsoft's RDP Client through Smart Card Extension (CVE-2021-38666) https://thalium.github.io/blog/posts/deserialization-bug-through-rdp-smart-card-extension/", "creation_timestamp": "2026-08-04T00:00:51.698665Z"}, {"uuid": "a9ab21eb-fb6b-44d0-b572-54844e58d7c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38666", "type": "seen", "source": "https://t.me/reverseame/1917", "content": "Remote Deserialization Bug in Microsoft's RDP Client through Smart Card Extension (CVE-2021-38666) https://thalium.github.io/blog/posts/deserialization-bug-through-rdp-smart-card-extension/", "creation_timestamp": "2026-07-29T12:02:50.056931Z"}, {"uuid": "be116ba9-5760-4b98-a1ec-5a15e71f3cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38666", "type": "seen", "source": "https://t.me/reverseame/1917", "content": "Remote Deserialization Bug in Microsoft's RDP Client through Smart Card Extension (CVE-2021-38666) https://thalium.github.io/blog/posts/deserialization-bug-through-rdp-smart-card-extension/", "creation_timestamp": "2026-07-30T00:02:40.830982Z"}]}