MSRC-CVE-2021-27076 — Microsoft SharePoint Server Remote Code Execution Vulnerability

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
In a network-based attack an attacker could gain access to create a site and could execute code remotely. The attacker would need to have privileges.

Security updates
16.0.5134.1000 — https://support.microsoft.com/kb/4493232
16.0.10372.20000 — https://support.microsoft.com/kb/4493230
14.0.7267.5000 — https://support.microsoft.com/help/3101541
15.0.5327.1000 — https://support.microsoft.com/kb/4493238

Vulnerabilities 1

High 8.8

CVE-2021-27076 EPSS 15%

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Mar 11, 2021

Revision history

2021-03-09 #1
Information published.

References

CVE-2021-27076 Microsoft SharePoint Server Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27076
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss