CVE-2021-27078: Microsoft Exchange Server Remote Code Execution Vulnerability

Published Mar 2, 2021
·
Updated

Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065.

Affected Software

10 affected componentsFixes available
Microsoft Exchange Server=2013-cumulative_update_23
Microsoft Exchange Server=2016-cumulative_update_18
Microsoft Exchange Server=2016-cumulative_update_19
Microsoft Exchange Server=2019-cumulative_update_7
Microsoft Exchange Server=2019-cumulative_update_8
Microsoft Exchange Server 2019=8
15.02.0792.010
Microsoft Exchange Server 2016=19
15.01.2176.009
Microsoft Exchange Server 2013=23
15.00.1497.012
Microsoft Exchange Server 2016=18
15.01.2106.013
Microsoft Exchange Server 2019=7
15.02.0721.013

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 15.01.2176.009Patch KB5000871
  2. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 15.02.0792.010Patch KB5000871
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 15.00.1497.012Patch KB5000871
  4. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 15.01.2106.013Patch KB5000871
  5. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 15.02.0721.013Patch KB5000871

Event History

Mar 2, 2021
CVE Published
via Microsoft·04:00 PM
Data Sourced
via Microsoft·04:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·04:00 PM
Affected Software
Updated
via Microsoft·04:00 PM
Description
CVE Published
via MITRE·11:55 PM
Data Sourced
via MITRE·11:55 PM
DescriptionSeverity
Mar 3, 2021
Data Sourced
via NVD·12:15 AM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is CVE-2021-27078?

CVE-2021-27078 is a remote code execution vulnerability in Microsoft Exchange Server.

2

How does CVE-2021-27078 affect Microsoft Exchange Server?

CVE-2021-27078 affects Microsoft Exchange Server versions 2013, 2016, and 2019 with specific cumulative updates.

3

What is the severity of CVE-2021-27078?

The severity of CVE-2021-27078 is rated as high with a severity value of 7.2.

4

How can I fix CVE-2021-27078?

To fix CVE-2021-27078, apply the relevant cumulative update provided by Microsoft.

5

Where can I find more information about CVE-2021-27078?

You can find more information about CVE-2021-27078 on the official Microsoft Security Guidance Advisory page.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203