coldbraid

CVE-2021-33766 Microsoft Exchange Server

Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.

CVSS
not scored

CWE-287

On CISA’s exploited list

Microsoft Exchange Server Information Disclosure

Added
2022-01-18
Federal patch deadline
2022-02-01
Ransomware use
not known