All CVE records
CVE-2021-42321 — Microsoft Exchange Server Remote Code Execution Vulnerability
Known ransomware use
CISA KEV listed
Added November 17, 2021 Remediate by December 1, 2021
Description
An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.
Required action
Apply updates per vendor instructions.
Notes
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.