KEV · Actively exploited

CVE-2021-34473

CVE-2021-34473 is actively exploited (CISA KEV catalog) : critical severity (CVSS 9.1), 0 tracked apps concerned, none still exposed on their current version.

Severity (CVSS): 9.1
Exploitation: Confirmed
Tracked apps: 0
Still exposed: 0

Public exploit : Nuclei Published on 2021-07-14

Microsoft Exchange Server Remote Code Execution Vulnerability

Attack vector : Network No privileges required No user interaction

Show raw CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS 100.00% predictive model; CISA confirms active exploitation percentile 100.0%

CISA Known Exploited Vulnerability

Added to KEV: 2021-11-03
Remediation deadline: 2021-11-17
Required action: Apply updates per vendor instructions.
Ransomware: Yes, known ransomware campaign

View on NVD ↗ CISA KEV catalog ↗ Advisory · msrc.microsoft.com Advisory · portal.msrc.microsoft.com