CVE-2021-42321

Microsoft Exchange Server Remote Code Execution Vulnerability

  • Published Nov 10, 2021
  • CVSS 8.8 high
  • 91.7% chance of exploitation in the next 30 days (EPSS)
  • In CISA's Known Exploited Vulnerabilities catalog
  • A Metasploit module exploits it
  • A fix is available

Affected software

CVE-2021-42321 at the National Vulnerability Database