CVE-2021-24072

—

CVSS 3.1

8.8 high

EPSS

2%p82

Published

Feb 25, 2021 (Feb 25, 2021)

Modified

Jun 17, 2026

Description

Microsoft SharePoint Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: sharepoint enterprise server, sharepoint foundation, sharepoint server
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news2 stories

Microsoft February 2021 Patch Tuesday fixes 56 bugs, including an actively exploited Windows zero

Security AffairsFeb 9, 22:27 UTC · Feb 9, 2021Vulnerability in the wildCVE-2021-1732 CVE-2021-24078 CVE-2021-24074+48 CVEs2

60

Microsoft Patch Tuesday for Feb. 2021 — Snort rules and prominent vulnerabilities

Cisco TalosFeb 9, 19:17 UTC · Feb 9, 2021Vulnerability in the wildCVE-2021-24074 CVE-2021-24094 CVE-2021-24072+1 CVEs

60