CVE-2021-31206

—1

CVSS 3.1

7.6 high

EPSS

13%p96

Published

Jul 14, 2021 (Jul 14, 2021)

Modified

Aug 10, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: exchange server
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (13.0%)

In the news3 stories

Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

The Hacker NewsAug 18, 06:29 UTC · Aug 18, 2025Data breach CVE-2014-4078 CVE-2020-0796 CVE-2021-26855+7 CVEs

60

Microsoft Exchange bugs top list of exploited vulnerabilities affecting financial sector

The RecordFeb 3, 00:00 UTC · Feb 3, 2023Vulnerability CVE-2015-1635 CVE-2021-31206 CVE-2021-34523+5 CVEs

60

The most common exploit paths enterprises leave open for attackers

Help Net SecurityJun 9, 00:00 UTC · Jun 9, 2022Data breach in the wildCVE-2021-42321 CVE-2021-31206 CVE-2021-26855+1 CVEs

60