CVE Catalog
Actively exploited in the wild
Microsoft Exchange Server Information Disclosure
Microsoft - Exchange Server · Listed in the CISA KEV since 2022-01-18. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-33766
HighCVSS 7.3KEVExploitation Probability (EPSS)
Very high risk97.50%
100th percentile - higher than 100% of all known CVEs
Summary
Information disclosure vulnerability in Microsoft Exchange Server. Allows an attacker to access sensitive information.
Risk Assessment
An attacker can access sensitive data, potentially leading to confidentiality breaches.
Recommendation
Install the latest security updates provided by Microsoft for Exchange Server.
Original NVD description (English source)
Microsoft Exchange Server Information Disclosure Vulnerability