CVE-2021-33766

🗓️ 14 Jul 2021 18:15:10Reported by [email protected]Type

Microsoft Exchange Server Information Disclosure CVE-2021-3376

Reporter	Title	Published	Views	Family All 35
ICS	Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations	14 Sep 202212:00	–	ics
ATTACKERKB	CVE-2021-33766 ProxyToken	14 Jul 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.	1 Sep 202100:00	–	bdu_fstec
GithubExploit	Exploit for CVE-2021-33766	31 Aug 202122:03	–	githubexploit
GithubExploit	Exploit for CVE-2021-33766	31 Aug 202122:03	–	githubexploit
Circl	CVE-2021-33766	13 Apr 202105:00	–	circl
CISA KEV Catalog	Microsoft Exchange Server Information Disclosure	18 Jan 202200:00	–	cisa_kev
CISA	CISA Adds 13 Known Exploited Vulnerabilities to Catalog	18 Jan 202200:00	–	cisa
CNNVD	Microsoft Exchange Server 授权问题漏洞	13 Jul 202100:00	–	cnnvd
Check Point Advisories	Microsoft Exchange Information Disclosure (CVE-2021-33766)	5 Sep 202100:00	–	checkpoint_advisories

NVD

Node

microsoft exchange_serverMatch2013cumulative_update_23

microsoft exchange_serverMatch2016cumulative_update_19

microsoft exchange_serverMatch2016cumulative_update_20

microsoft exchange_serverMatch2019cumulative_update_8

microsoft exchange_serverMatch2019cumulative_update_9

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33766
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33766
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-798/

10 Aug 2026 19:58Current

CVSS 25

CVSS 3.17.3 - 7.5

EPSS0.98136