CVE-2021-33766

HighCVSS 7.3/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Microsoft Exchange Server Information Disclosure Vulnerability

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected software

No affected versions have been published.

Timeline

Published
Jul 14, 2021
Last modified
Aug 10, 2026
Added to CISA KEV
Jan 18, 2022
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-337678.2Open Enclave SDK Elevation of Privilege VulnerabilityCVE-2021-337688.0Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-33776.1The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due toCVE-2021-337717.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-337727.5Windows TCP/IP Driver Denial of Service VulnerabilityCVE-2021-337737.8Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2021-337747.0Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-337757.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-337767.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-337777.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-337787.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-337798.1Windows AD FS Security Feature Bypass Vulnerability
CVE-2021-33766: High severity, CVSS 7.3 | Vulnix