CVE-2021-36940

HighCVSS 7.6/10Last modified Aug 10, 2026

Description

Microsoft SharePoint Server Spoofing Vulnerability

Metrics

CVSS 3.1 7.6/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

Affected software

VendorProductVersions
MicrosoftMicrosoft SharePoint Enterprise Server 2013 Service Pack 1>= 15.0.0, < 15.0.5371.1000
MicrosoftMicrosoft SharePoint Enterprise Server 2016>= 16.0.0, < 16.0.5200.1000
MicrosoftMicrosoft SharePoint Server 2019>= 16.0.0, < 16.0.10377.20000

References

Timeline

Published
Aug 12, 2021
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-369417.8Microsoft Word Remote Code Execution VulnerabilityCVE-2021-369427.5Windows LSA Spoofing VulnerabilityCVE-2021-369434.0Azure CycleCloud Elevation of Privilege VulnerabilityCVE-2021-369457.3Windows 10 Update Assistant Elevation of Privilege VulnerabilityCVE-2021-369465.4Microsoft Dynamics Business Central Cross-site Scripting VulnerabilityCVE-2021-369478.8Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-369487.8Windows Update Medic Service Elevation of Privilege VulnerabilityCVE-2021-369497.1Microsoft Azure Active Directory Connect Authentication Bypass VulnerabilityCVE-2021-36954.5A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heaCVE-2021-369505.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2021-369527.8Visual Studio Remote Code Execution VulnerabilityCVE-2021-369537.5Windows TCP/IP Denial of Service Vulnerability
CVE-2021-36940: High severity, CVSS 7.6 | Vulnix