CVE-2021-27076

—

CVSS 3.1

8.8 high

EPSS

14%p96

Published

Mar 11, 2021 (Mar 11, 2021)

Modified

Aug 19, 2026

Description

Microsoft SharePoint Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: business productivity servers, sharepoint foundation, sharepoint server
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (14.4%)

In the news7 stories

June 2026 CVE Landscape

Recorded FutureJul 17, 00:00 UTC · Jul 17, 2026Ransomware in the wildCVE-2026-35616 CVE-2026-25939 CVE-2020-17103+53 CVEs

60

New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks

The Hacker NewsJun 27, 12:06 UTC · Jun 27, 2026Malware CVE-2021-26855 CVE-2023-32315 CVE-2024-36401+10 CVEs

60

Microsoft Issues Security Patches for 89 Flaws — IE 0

The Hacker NewsAug 13, 09:07 UTC · Aug 13, 2021Vulnerability in the wildCVE-2021-26855 CVE-2021-26857 CVE-2021-26858+8 CVEs

60

March 2021 Patch Tuesday: Microsoft fixes yet another actively exploited IE zero-day

Help Net SecurityJun 8, 18:28 UTC · Jun 8, 2021Exploit / PoC in the wildCVE-2021-26411 CVE-2021-27076 CVE-2021-26867+1 CVEs

60

Microsoft's March Patch Tuesday fixes 14 Critical flaws

Security AffairsMar 10, 08:16 UTC · Mar 10, 2021Vulnerability in the wildCVE-2021-26411 CVE-2021-26897 CVE-2021-27074+2 CVEs

60

StrikeShark: a new campaign involving a custom SharkLoader and Cobalt Strike Beacon

Kaspersky SecurelistJun 24, 14:23 UTC · Jun 24, 2026Malware CVE-2021-26855 CVE-2023-32315 CVE-2024-36401+10 CVEs

47

How a machine-learning model in Kaspersky SIEM detected DLL

Kaspersky SecurelistOct 6, 08:00 UTC · Oct 6, 2025Vulnerability CVE-2021-27076

35