KEV · Actively exploited

CVE-2021-33766

CVE-2021-33766 is actively exploited (CISA KEV catalog) : high severity (CVSS 7.3), 0 tracked apps concerned, none still exposed on their current version.

Severity (CVSS): 7.3
Exploitation: Confirmed
Tracked apps: 0
Still exposed: 0

Public exploit : Nuclei Published on 2021-07-14

Microsoft Exchange Server Information Disclosure Vulnerability

Attack vector : Network No privileges required No user interaction

Show raw CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS 98.14% predictive model; CISA confirms active exploitation percentile 99.9%

CISA Known Exploited Vulnerability

Added to KEV: 2022-01-18
Remediation deadline: 2022-02-01
Required action: Apply updates per vendor instructions.
Ransomware: Unknown (not documented by CISA)

View on NVD ↗ CISA KEV catalog ↗ Advisory · msrc.microsoft.com Advisory · portal.msrc.microsoft.com