NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2021-31195

CVSS 3.1: 6.5 medium
EPSS: 74%p99
Published: May 11, 2021 · May 11, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-31195 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendors: microsoft

Products: exchange server

Weakness: CWE-290

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (73.7%)

In the news

3 stories

Latest Microsoft Windows Updates Patch Dozens of Security Flaws

The Hacker NewsFeb 3, 03:59 UTC · Feb 3, 2026VulnerabilityExploitedCVE-2021-31166 CVE-2021-28476 CVE-2021-26419+42 · 1 read

60

Microsoft vulnerabilities have grave implications for organizations of all sizes

Help Net SecurityDec 10, 00:00 UTC · Dec 10, 2021VulnerabilityCVE-2021-26855 CVE-2021-27065 CVE-2021-31196+83

60

Hackers Actively Searching for Unpatched Microsoft Exchange Servers

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2021VulnerabilityExploitedCVE-2021-26855 CVE-2021-27065 CVE-2021-34473+72 · 1 read

60