Advisories · Technology

Microsoft Exchange Server 2016 Cumulative Update 21.

Every CVE that names Microsoft Exchange Server 2016 Cumulative Update 21 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-24463 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 21
- Microsoft Exchange Server 2019 Cumulative Update 10
Not analysed yet 9 Mar 2022
CVE-2022-23277 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 9 Mar 2022
CVE-2022-21969 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 11 Jan 2022
CVE-2022-21855 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 11 Jan 2022
CVE-2022-21846 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 22
- Microsoft Exchange Server 2019 Cumulative Update 11
Not analysed yet 11 Jan 2022
CVE-2021-42321 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 21
- Microsoft Exchange Server 2016 Cumulative Update 22
Not analysed yet 10 Nov 2021
CVE-2021-42305 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 10 Nov 2021
CVE-2021-41349 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 10 Nov 2021
CVE-2021-41350 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 21
- Microsoft Exchange Server 2019 Cumulative Update 10
Not analysed yet 13 Oct 2021
CVE-2021-41348 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 21
- Microsoft Exchange Server 2019 Cumulative Update 10
Not analysed yet 13 Oct 2021
CVE-2021-34453 CVE record

CVSS 7.5 High

Microsoft Exchange Server Denial of Service Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 11
- Microsoft Exchange Server 2019 Cumulative Update 10
Not analysed yet 13 Oct 2021
CVE-2021-26427 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 22
- Microsoft Exchange Server 2019 Cumulative Update 11
Not analysed yet 13 Oct 2021
CVE-2021-34470 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 14 Jul 2021
CVE-2021-33768 CVE record

CVSS 8.0 High

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 20
- Microsoft Exchange Server 2016 Cumulative Update 21
Not analysed yet 14 Jul 2021
CVE-2021-31206 CVE record

CVSS 7.6 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 14 Jul 2021
CVE-2021-31196 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 14 Jul 2021