CVE-2021-27076

As of 2024-11-19, CVE-2021-27076 is a CVSS 8.8 (HIGH-severity) vulnerability. Public exploit code available. EPSS exploitation probability 14.4%. Threadlinqs Intelligence tracks 3 threats exploiting it.

Last updated: 2024-11-19

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploitation status

public exploit code available

• trickest/cve (trickest)

Threats tracking this CVE

• StrikeShark Campaign: SharkLoader Dropper Targets Governments and Software Developers via N-Day Exploits and Trojanized Installers to Deploy Cobalt Strike — HIGH
• SharkLoader Malware Campaign Uses Fake Cisco AnyConnect and Google Update Installers to Deploy Cobalt Strike — HIGH
• SharkLoader Malware Deploys Cobalt Strike Beacon via DLL Side-Loading in StrikeShark Campaign — HIGH

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27076
• https://www.zerodayinitiative.com/advisories/ZDI-21-276/

← all vulnerabilities · Markdown version · Threadlinqs Intelligence

Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.