Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2021-33766

Microsoft Exchange Server Information Disclosure

Description

Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 1 Feb 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.