Is CVE-2021-22153 actively exploited?

No active exploitation of CVE-2021-22153 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-22153 be exploited remotely?

No. CVE-2021-22153 requires local access to exploit.

What is the CVSS score of CVE-2021-22153?

CVE-2021-22153 has a CVSS score of 7.3 (HIGH).

HOME VULNERABILITIESCVE-2021-22153

HIGH

CVE-2021-22153

CWE-1236Published: May 13, 2021· Updated: Jun 17, 2026

7.3

CVSS v3.1

Official Description

A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of the user.

NVD Source

Technical Analysis

CVE-2021-22153 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.3.