CVE-2021-42321
Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS
8.8
Alto
EPSS
91.7%
p100
KEV
SÍ
17 nov 2021
Exploit Today
80
0-100
Publicado: 10 nov 2021 · Última mod.: 19 ago 2026
91.7%EPSS · 30 días91.7%
2026-09-162026-10-14
Producto
Microsoft / Exchange
Vulnerabilidad
Microsoft Exchange Server Remote Code Execution Vulnerability
Añadido a KEV
17 nov 2021
Remediar antes de
1 dic 2021
Uso conocido en ransomware
Sí
Descripción resumida
An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-42321
Microsoft Exchange Server Remote Code Execution Vulnerability
- msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42321
- packetstormsecurity.comhttp://packetstormsecurity.com/files/166153/Microsoft-Exchange-Server-Remote-Code-Execution.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/168131/Microsoft-Exchange-Server-ChainedSerializationBinder-Remote-Code-Execution.html
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42321
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42321
Sin CVEs relacionados por CWE o producto.