ACE vulnerabilities in Microsoft Exchange Server

Description

Remote code execution vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

• CVE-2021-26412

• CVE-2021-26855
• CVE-2021-27078
• CVE-2021-27065
• CVE-2021-26854
• CVE-2021-26857
• CVE-2021-26858

Exploitation

This vulnerability can be exploited by the following malware:

https://threats.kaspersky.com/en/threat/Exploit.Script.CVE-2021-26855/

Public exploits exist for this vulnerability.

Related products

• Microsoft-Exchange-Server

CVE list

• CVE-2021-26412
  critical
• CVE-2021-26855
  critical
• CVE-2021-27078
  critical
• CVE-2021-27065
  critical
• CVE-2021-26854
  high
• CVE-2021-26857
  critical
• CVE-2021-26858
  critical

KB list

• 5000871
• 5000978

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com