CVE-2021-31195

—

CVSS 3.1

6.5 medium

EPSS

74%p99

Published

May 11, 2021 (May 11, 2021)

Modified

Jun 17, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: exchange server
Weakness: CWE-290
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (73.7%)

In the news3 stories

Latest Microsoft Windows Updates Patch Dozens of Security Flaws

The Hacker NewsFeb 3, 03:59 UTC · Feb 3, 2026Vulnerability in the wildCVE-2021-31166 CVE-2021-28476 CVE-2021-26419+4 CVEs

60

Microsoft vulnerabilities have grave implications for organizations of all sizes

Help Net SecurityDec 10, 00:00 UTC · Dec 10, 2021Vulnerability CVE-2021-26855 CVE-2021-27065 CVE-2021-31196+8 CVEs

60

Hackers Actively Searching for Unpatched Microsoft Exchange Servers

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2021Vulnerability in the wildCVE-2021-26855 CVE-2021-27065 CVE-2021-34473+7 CVEs

60