CVE-2021-27065CISA KEVEPSS p100.0%

CVE-2021-27065Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft / Exchange Server

Description

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

Scoring

CVSS 7.8 ()
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS99.88% probability of exploitation · percentile 100.0% · 2026-09-24T12:00:20Z
Last modified2026-10-01

CISA KEV entry

Added to KEV: 2021-11-03

(incoming)1

TypeTargetConfidenceTier
KEVEntryMicrosoft Exchange Server Remote Code Execution Vulnerabilitykev-cve-2021-270650%live

Related by meaning· 4

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Microsoft Exchange Server Information Disclosure Vulnerability
CVE
Microsoft Exchange Server Security Feature Bypass Vulnerability
CVE
Microsoft Exchange Server Privilege Escalation Vulnerability
CVE
Microsoft Office Remote Code Execution Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.