{"metadata": {"vulnerability": "CVE-2021-27076", "count": 36, "kinds": {"milestone": 7, "sighting": 11, "kev": 0, "other": 18}}, "data": [{"timestamp": "2021-02-10T00:00:00Z", "date_only": false, "value": "2021-02-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-27076", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-03-09T16:00:00Z", "date_only": false, "value": "2021-03-09T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-27076", "field": "containers.cna.datePublic"}, {"timestamp": "2021-03-10T00:00:00Z", "date_only": false, "value": "2021-03-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-180", "record": "CERTFR-2021-AVI-180", "field": "last_revision_date"}, {"timestamp": "2021-03-10T00:00:00Z", "date_only": false, "value": "2021-03-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-182", "record": "CERTFR-2021-AVI-182", "field": "last_revision_date"}, {"timestamp": "2021-03-10T00:00:00Z", "date_only": false, "value": "2021-03-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-180", "record": "CERTFR-2021-AVI-180", "field": "initial_release_date"}, {"timestamp": "2021-03-10T00:00:00Z", "date_only": false, "value": "2021-03-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-182", "record": "CERTFR-2021-AVI-182", "field": "initial_release_date"}, {"timestamp": "2021-03-10T00:00:00Z", "date_only": false, "value": "2021-03-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-180", "record": "CERTFR-2021-AVI-180", "field": "revisions.0.revision_date"}, {"timestamp": "2021-03-10T00:00:00Z", "date_only": false, "value": "2021-03-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-182", "record": "CERTFR-2021-AVI-182", "field": "revisions.0.revision_date"}, {"timestamp": "2021-03-10T00:00:00Z", "date_only": true, "value": "2021-03-10", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-48891", "record": "CNVD-2021-48891", "field": "submitTime"}, {"timestamp": "2021-03-11T15:50:53Z", "date_only": false, "value": "2021-03-11T15:50:53.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-27076", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-03-11T16:15:00Z", "date_only": false, "value": "2021-03-11T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V4X2-CQ4F-RV9R", "record": "GHSA-V4X2-CQ4F-RV9R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-03-11T16:15:18.190Z", "date_only": false, "value": "2021-03-11T16:15:18.190", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-27076", "record": "FKIE_CVE-2021-27076", "field": "published"}, {"timestamp": "2021-03-11T16:15:18.190Z", "date_only": false, "value": "2021-03-11T16:15:18.190", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2021-27076", "record": "GSD-2021-27076", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2021-03-22T10:14:45Z", "date_only": false, "value": "2021-03-22T10:14:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/infobes/301", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "72af8eae-2824-4657-94bd-b3307546635f", "content": "CVE-2021-26855/27065 - ProxyLogon MS Exchange Server RCE Vulnerability\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-22986 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-27076 - A Replay-style Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-21193 - Google Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-22987 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-21193:\nGoogle Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-27076:\nReplay Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-27889, CVE-2021-27890:\nMyBB RCE Chain\nhttps://blog.sonarsource.com/mybb-remote-code-execution-chain", "url": "https://t.me/infobes/301"}, {"timestamp": "2021-03-29T05:54:18Z", "date_only": false, "value": "2021-03-29T05:54:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2955", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "5d4de988-9fd9-47d4-9ba1-d66883860acf", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 15 - 21)\nCVE-2021-26855/27065 - ProxyLogon MS Exchange Server RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-22986/22987 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-27076 - A Replay-style Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-21193 - Google Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-21193:\nGoogle Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-27076:\nReplay Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-27889, CVE-2021-27890:\nMyBB RCE Chain\nhttps://blog.sonarsource.com/mybb-remote-code-execution-chain", "url": "https://t.me/CyberSecurityTechnologies/2955"}, {"timestamp": "2021-07-09T00:00:00Z", "date_only": true, "value": "2021-07-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-48891", "record": "CNVD-2021-48891", "field": "openTime"}, {"timestamp": "2021-11-30T03:27:09Z", "date_only": false, "value": "2021-11-30T03:27:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2930", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "7572f74c-38b0-4bb4-aec5-9738edb24808", "content": "#exploit \n1. CVE-2021-27076:\nA Replay-style Deserialization Attack Against SharePoint (PoC)\nhttps://www.zerodayinitiative.com/blog/2021/3/17/cve-2021-27076-a-replay-style-deserialization-attack-against-sharepoint\n\n2. CVE-2020-16045:\nChrome sandbox escape\nhttps://securitylab.github.com/research/one_day_short_of_a_fullchain_sbx\n]-> full exploit:\nhttps://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/SandboxEscape/GHSL-2020-165", "url": "https://t.me/CyberSecurityTechnologies/2930"}, {"timestamp": "2022-05-24T17:44:25Z", "date_only": false, "value": "2022-05-24T17:44:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V4X2-CQ4F-RV9R", "record": "GHSA-V4X2-CQ4F-RV9R", "field": "published"}, {"timestamp": "2023-12-13T01:23:35.850Z", "date_only": false, "value": "2023-12-13T01:23:35.850390Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-27076", "record": "GSD-2021-27076", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-29T17:16:05.780Z", "date_only": false, "value": "2023-12-29T17:16:05.780", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-27076", "record": "GSD-2021-27076", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-09T16:23:17.145Z", "date_only": false, "value": "2024-01-09T16:23:17.145107Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-27076", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-01-09T16:23:17.145Z", "date_only": false, "value": "2024-01-09T16:23:17.145107Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-27076", "record": "FKIE_CVE-2021-27076", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-03T20:40:47.268Z", "date_only": false, "value": "2024-08-03T20:40:47.268Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-27076", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-19T16:09:37.622Z", "date_only": false, "value": "2024-11-19T16:09:37.622Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-27076", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-06T08:33:30Z", "date_only": false, "value": "2025-10-06T08:33:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/e55b5e10f5cee9782df9d6b876e27231", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "50866c2e-6a55-4bb3-9069-a87ed0d8d404", "url": "https://gist.github.com/Darkcrai86/e55b5e10f5cee9782df9d6b876e27231"}, {"timestamp": "2025-10-06T21:17:14.091Z", "date_only": false, "value": "2025-10-06T21:17:14.091687Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-0f44b7f2-09bc4f263343226c", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "4406a4e6-a4bf-4353-a5ca-4a23b22fd633", "url": "https://poliverso.org/objects/0477a01e-0f44b7f2-09bc4f263343226c"}, {"timestamp": "2026-06-25T06:34:31.787Z", "date_only": false, "value": "2026-06-25T06:34:31.787865Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-998693a6-0c9cca46b62121bd", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "76df4a63-fb50-4259-b0d7-4f9903987219", "url": "https://poliverso.org/objects/0477a01e-998693a6-0c9cca46b62121bd"}, {"timestamp": "2026-07-03T08:23:45.629Z", "date_only": false, "value": "2026-07-03T08:23:45.629996Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hasamba72.bsky.social/post/3mpq4me4yo42g", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "b8ddec6b-cd07-4b5f-9c9d-49a2f77e899e", "url": "https://bsky.app/profile/hasamba72.bsky.social/post/3mpq4me4yo42g"}, {"timestamp": "2026-07-29T12:02:59.453Z", "date_only": false, "value": "2026-07-29T12:02:59.453546Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1011", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "bb953899-1f62-49f8-bc0f-1d3ca209a875", "url": "https://t.me/reverseame/1011"}, {"timestamp": "2026-07-30T00:02:48.983Z", "date_only": false, "value": "2026-07-30T00:02:48.983570Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1011", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "716c9505-9cf7-4444-9097-1d5f9db2a086", "url": "https://t.me/reverseame/1011"}, {"timestamp": "2026-08-03T12:12:26.918Z", "date_only": false, "value": "2026-08-03T12:12:26.918219Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1011", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "f62ba08e-8a2f-4790-bf5c-513d1db847ff", "url": "https://t.me/reverseame/1011"}, {"timestamp": "2026-08-04T00:00:40.377Z", "date_only": false, "value": "2026-08-04T00:00:40.377017Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1011", "record": "CVE-2021-27076", "field": "creation_timestamp", "uuid": "54413df5-1d81-42de-94d8-1c2a815669f6", "url": "https://t.me/reverseame/1011"}, {"timestamp": "2026-08-19T16:30:50.882Z", "date_only": false, "value": "2026-08-19T16:30:50.882Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-27076", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-19T16:30:50.882Z", "date_only": false, "value": "2026-08-19T16:30:50.882Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2021-27076", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-19T17:17:52.363Z", "date_only": false, "value": "2026-08-19T17:17:52.363", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-27076", "record": "FKIE_CVE-2021-27076", "field": "lastModified"}, {"timestamp": "2026-08-19T18:31:35Z", "date_only": false, "value": "2026-08-19T18:31:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V4X2-CQ4F-RV9R", "record": "GHSA-V4X2-CQ4F-RV9R", "field": "modified"}]}