CVE-2021-26412

CriticalCVSS 9.1/10Last modified Aug 19, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft Exchange Server 2013 Cumulative Update 23>= 15.00.0, < 15.00.1497.012
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 18>= 15.01.0, < 15.01.2106.013
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 19>= 15.01.0, < 15.01.2176.009
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 7>= 15.02.0, < 15.02.0721.013
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 8>= 15.02.0, < 15.02.0792.010

References

Timeline

Published
Mar 3, 2021
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-264136.2Windows Installer Spoofing VulnerabilityCVE-2021-264144.8Windows DCOM Server Security Feature BypassCVE-2021-264157.8Windows Installer Elevation of Privilege VulnerabilityCVE-2021-264167.7Windows Hyper-V Denial of Service VulnerabilityCVE-2021-264175.5Windows Overlay Filter Information Disclosure VulnerabilityCVE-2021-264184.6Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-264197.5Scripting Engine Memory Corruption VulnerabilityCVE-2021-264207.1Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-264216.5Skype for Business and Lync Spoofing VulnerabilityCVE-2021-264227.2Skype for Business and Lync Remote Code Execution VulnerabilityCVE-2021-264237.5.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2021-264249.9Windows TCP/IP Remote Code Execution Vulnerability