CVE Watch10 de ago. de 2026

CVE-2021-31196

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS

7.2

Alta

EPSS

54.1%

p99

KEV

SIM

21 de ago. de 2024

Exploit Today

0-100

Publicado: 14 de jul. de 2021 · Última mod.: 10 de ago. de 2026

EPSS · 30d

54.1%EPSS · 30 dias54.1%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Exchange Server

Vulnerabilidade

Microsoft Exchange Server Information Disclosure Vulnerability

Adicionado ao KEV

21 de ago. de 2024

Corrigir até

11 de set. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-31196; https://nvd.nist.gov/vuln/detail/CVE-2021-31196

Descrição técnica

Microsoft Exchange Server Remote Code Execution Vulnerability

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2023-215298.8 ALT

99.1%

KEV—80Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability78d CVE-2022-410808.8 ALT

99.6%

KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability87d CVE-2021-345239.0 CRÍ

100.0%

KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability87d CVE-2021-344739.1 CRÍ

100.0%

KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability87d CVE-2021-337667.3 ALT

99.9%

KEV—80Microsoft Exchange Server Information Disclosure87d CVE-2021-270657.8 ALT

100.0%

KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability35d