NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2021-31206

CVSS 3.1: 7.6 high
EPSS: 13%p96
Published: Jul 14, 2021 · Jul 14, 2021
Modified: Aug 10, 2026

Analyze CVE-2021-31206 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendors: microsoft

Products: exchange server

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (13.0%)

In the news

3 stories

Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

The Hacker NewsAug 18, 06:29 UTC · Aug 18, 2025Data breachCVE-2014-4078 CVE-2020-0796 CVE-2021-26855+73 · 1 read

60

Microsoft Exchange bugs top list of exploited vulnerabilities affecting financial sector

The RecordFeb 3, 00:00 UTC · Feb 3, 2023VulnerabilityCVE-2015-1635 CVE-2021-31206 CVE-2021-34523+51

60

The most common exploit paths enterprises leave open for attackers

Help Net SecurityJun 9, 00:00 UTC · Jun 9, 2022Data breachExploitedCVE-2021-42321 CVE-2021-31206 CVE-2021-26855+13 · 1 read

60