CVE-2021-42321

Microsoft Exchange Server Remote Code Execution Vulnerability

8.8
CVSS 3.1
91.7 %
EPSS (current)
2021-11-17
KEV addition
Yes
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Microsoft / Exchange

Published: 2021-11-10 · Due (CISA): 2021-12-01

CWE: – · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
metasploitexploit/windows/http/exchange_chainedserializationbinder_rceexploit/windows/http/exchange_chainedserializationbinder_rce2021-12-09

References only — no downloads or instructions.

Sources