KEV Entry

CVE-2021-33766

Known Exploited Vulnerability Entry External Catalog

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2021-33766

2022-01-18 00:00 UTC

Timestamps

2022-01-18

2022-01-18

Scope

KEVIntel entry: Microsoft Exchange Server Information Disclosure Vulnerability | Affected: Microsoft / Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8 | CVSS: 7.3 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: False

References
  • {'id': 'CVE-2021-33766', 'url': 'https://www.cve.org/CVERecord?id=CVE-2021-33766'}
  • {'id': 'kevintel', 'url': 'https://kevintel.com/vuln/CVE-2021-33766'}

ad6a89cf-4875-4b9b-8812-41d06625d49a

caeb2787-0d58-4236-9039-7c86c3e566f3

2026-06-23 11:13 UTC

2026-06-23 11:13 UTC

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
public_report kevintel successful_exploitation 0.70
View details 
{
  "added_date": "2022-01-18T00:00:00.000Z",
  "ahead_of_cisa_kev": null,
  "cvss_score": 7.3,
  "cvss_severity": "HIGH",
  "epss_percentile": null,
  "epss_score": null,
  "feed": "KEVIntel (kevintel.com)",
  "not_yet_in_cisa_kev": false,
  "product": "Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8",
  "title": "Microsoft Exchange Server Information Disclosure Vulnerability",
  "used_in_malware": "unknown",
  "vendor": "Microsoft"
}
 -
Export Options
JSON Object JSON API View Full Catalog