{"vulnerability": "CVE-2021-28482", "sightings": [{"uuid": "fefe9803-89a6-420d-9190-8c07152f9e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2021-04-15T06:06:29.000000Z"}, {"uuid": "8cb97789-3279-4822-96fc-994967ff5ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca", "content": "", "creation_timestamp": "2025-02-28T23:49:13.272798Z"}, {"uuid": "8dc20d7e-98ea-4ee7-86b1-d458ff4e35c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/cKure/5354", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-28482: Exchange PoC\n\nhttps://github.com/Shadow0ps/CVE-2021-28482-Exchange-POC", "creation_timestamp": "2021-05-16T06:34:06.000000Z"}, {"uuid": "01525e97-6160-4923-b951-c5990a673a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/cKure/4840", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Microsoft today\u00a0issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA), and one zero-day bug in Desktop Window Manager.\n\u00a0\nCVE-2021-28310, a Win32k elevation of privilege vulnerability, is the only CVE under active attack patched this month.\n\nYesterday's patches also addressed four critical remote code execution vulnerabilities in Microsoft Exchange Server:\u00a0CVE-2021-28480,\u00a0CVE-2021-28481,\u00a0CVE-2021-28482, and\u00a0CVE-2021-28483. All of these were discovered by the NSA and affect Exchange Server versions 2013 through 2019.\nCVE-2021-28480 and CVE-2021-28481 have a CVSS score of 9.8 and require no authorization or user interaction to exploit.", "creation_timestamp": "2021-04-14T04:19:35.000000Z"}, {"uuid": "ed6c580b-8cbb-44bf-b5ee-51aa0011c52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/QHCepyPm1WQaqfBNNWxTv-7jnQZ340ReXjHBRJFddrcYXOyl", "content": "", "creation_timestamp": "2021-05-25T01:41:58.000000Z"}, {"uuid": "6e0f6a59-ff62-4a72-a775-827583e06648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/ziOu5Nvr2eB-voLXOlKOWIDqDERt0p9ExXuoFj0nmEN3JtiR", "content": "", "creation_timestamp": "2021-05-24T01:44:08.000000Z"}, {"uuid": "e595db5e-d157-41f9-8f69-e0275bde5cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/kY2fNljGOGDepf8HmWYBRM6aPIpDZMxAdiPSEQJGkdOslRcC", "content": "", "creation_timestamp": "2021-05-22T13:20:40.000000Z"}, {"uuid": "97e9d253-8395-45cc-886a-801f72195dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/fKYCYTpidtTLIalbI8SvuUxKCSSNn--CKZjLb7jTZvHE2VCS", "content": "", "creation_timestamp": "2021-05-22T02:52:22.000000Z"}, {"uuid": "43083f76-ab0b-4812-9a24-370de9c42914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/c9Dma8iydLkBdImjfvuHvFxOwdnZNkvZiWtyeYJYgPUomhiw", "content": "", "creation_timestamp": "2021-05-30T01:39:32.000000Z"}, {"uuid": "62008312-559e-461e-b3d5-b3db45e8ca83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/alexmakus/4025", "content": "\u0421\u0432\u0435\u0436\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u043f\u043e\u0434\u044a\u0435\u0445\u0430\u043b\u0438 \u0434\u043b\u044f Exchange \n\nhttps://techcommunity.microsoft.com/t5/exchange-team-blog/released-april-2021-exchange-server-security-updates/ba-p/2254617\n\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28480\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28481\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28482\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28483\n\n\u0434\u0430\u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0436\u0430\u043b\u043a\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 Exchange, \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 \u0443 \u043d\u0438\u0445 \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u0441\u044f.", "creation_timestamp": "2021-04-13T19:02:10.000000Z"}, {"uuid": "53cc9f21-3336-4bf7-94f8-d167ca7bbdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityIL/3224", "content": "\u05d4-NSA \u05de\u05d3\u05d5\u05d5\u05d7\u05d9\u05dd \u05db\u05d9 \u05de\u05e6\u05d0\u05d5 \u05de\u05e1\u05e4\u05e8 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05e9\u05e8\u05ea\u05d9 Exchange, \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05d5\u05e6\u05d9\u05d0\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05dc\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd.\n\n\u05dc\u05e4\u05d9 \u05d4\u05e4\u05e8\u05e1\u05d5\u05dd \u05d4-NSA \u05d3\u05d9\u05d5\u05d5\u05d7\u05d5 \u05dc\u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05e2\u05dc 4 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05de\u05e6\u05d0\u05d5 \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dc \u05e9\u05e8\u05ea\u05d9 Exchange 2013-2019.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05e7\u05d9\u05d1\u05dc\u05d5 \u05d0\u05ea \u05de\u05e1\u05e4\u05e8\u05d9 \u05d4\u05de\u05e2\u05e7\u05d1 \u05d4\u05d1\u05d0\u05d9\u05dd:\n\nCVE-2021-28480\nCVE-2021-28481\nCVE-2021-28482\nCVE-2021-28483\n\n\u05db\u05d0\u05de\u05d5\u05e8, \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05d9\u05e6\u05d0 \u05d4\u05d9\u05d5\u05dd \u05de\u05d7\u05d1\u05e8\u05ea \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05e1\u05d5\u05d2\u05e8 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea.\n\nhttps://t.me/CyberSecurityIL/915", "creation_timestamp": "2021-04-14T00:12:17.000000Z"}, {"uuid": "80798c76-e40f-48db-a820-503041fd16d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/sysadm_in_up/622", "content": "Microsoft Exchange From Deserialization to Post-Auth RCE (CVE-2021\u201328482) | by Jang | Apr, 2021 | Medium\nhttps://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f\n\nPoC\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-07-30T00:03:07.880832Z"}, {"uuid": "61fe97db-7991-4936-9e76-9a76b58e5deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/sysadm_in_up/622", "content": "Microsoft Exchange From Deserialization to Post-Auth RCE (CVE-2021\u201328482) | by Jang | Apr, 2021 | Medium\nhttps://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f\n\nPoC\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-08-04T05:00:04.636604Z"}, {"uuid": "338c63ef-f3a4-4c39-a2d9-e6624866c259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/3286", "content": "#exploit\nCVE-2021-28482:\nMS Exchange Server RCE Vulnerability (PoC)\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda\n]-> https://github.com/Shadow0ps/CVE-2021-28482-Exchange-POC/blob/main/Proof-Of-Concept.py", "creation_timestamp": "2024-10-04T15:10:04.000000Z"}, {"uuid": "7ccf4b7d-163f-4707-a765-0bcd515814b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3159", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156", "creation_timestamp": "2021-04-19T11:01:18.000000Z"}, {"uuid": "fdf9fd07-486f-4c22-892d-b9f9e49eeaf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3279", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-22893 Pulse SecureVPN RCE\nhttps://t.me/cybersecuritytechnologies/3185\nCVE-2021-28310 - Win32k EoP Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156\nCVE-2021-28480/28482 - MS Exchange Server RCE\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2024-04-30T17:11:44.000000Z"}, {"uuid": "b280042b-c84e-4c54-a839-2f86a09a970c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3506", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (may 1-31)\nCVE-2021-31166 - HTTP Stack RCE\nhttps://t.me/cybersecuritytechnologies/3388\nCVE-2021-21551 -Dell BIOS Driver PE\nhttps://t.me/cybersecuritytechnologies/3293\nCVE-2021-30747 -Covert channel in Apple M1\nhttps://t.me/cybersecuritytechnologies/3472\nCVE-2021-22204 -DjVu vuln\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-28482 -MS Exchange RCE\nhttps://t.me/cybersecuritytechnologies/3286\nCVE-2021-21974 -VMware\u00a0ESXi heap-overflow\nhttps://t.me/cybersecuritytechnologies/3460\nCVE-2021-29447 -WordPress XXE\nhttps://t.me/cybersecuritytechnologies/3142\nCVE-2021-21985 - vSphere Client RCE\nhttps://t.me/cybersecuritytechnologies/3493\nCVE-2021-32471 -ACE in TuringMachine\nhttps://t.me/cybersecuritytechnologies/3364\nCVE-2021-3490 -Linux Kernel eBPF\nhttps://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=049c4e13714ecbca567b4d5f6d563f05d431c80e", "creation_timestamp": "2024-09-28T16:48:46.000000Z"}, {"uuid": "f87510a8-620c-4cd1-b267-08cd2c80e390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1125", "content": "Nice description (likely you will need Google Translate :)) \u00bb https://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f", "creation_timestamp": "2026-08-03T11:08:45.144916Z"}, {"uuid": "8f1abe21-3803-4193-89ee-72bf3a4419d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1125", "content": "Nice description (likely you will need Google Translate :)) \u00bb https://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f", "creation_timestamp": "2026-08-04T00:00:41.856534Z"}, {"uuid": "a34a3cc0-8e8b-4b62-9a14-5e7b378f7170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/sysadm_in_up/622", "content": "Microsoft Exchange From Deserialization to Post-Auth RCE (CVE-2021\u201328482) | by Jang | Apr, 2021 | Medium\nhttps://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f\n\nPoC\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-08-05T00:00:55.361839Z"}, {"uuid": "341d4f29-d0e1-4c1b-b0f4-dae0f610c6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/reverseame/1125", "content": "Nice description (likely you will need Google Translate :)) \u00bb https://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f", "creation_timestamp": "2026-07-29T12:02:58.293868Z"}, {"uuid": "0b22bffa-c5f8-428c-abd7-aa0a21363fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/sysadm_in_up/622", "content": "Microsoft Exchange From Deserialization to Post-Auth RCE (CVE-2021\u201328482) | by Jang | Apr, 2021 | Medium\nhttps://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f\n\nPoC\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-07-29T12:03:22.302419Z"}, {"uuid": "906c3aa5-5adf-4f5b-af14-822a8db34bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/reverseame/1125", "content": "Nice description (likely you will need Google Translate :)) \u00bb https://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f", "creation_timestamp": "2026-07-30T00:02:47.934943Z"}, {"uuid": "376a04a9-f7dd-496c-b42b-27bcdb807e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-01T17:00:51.487413Z"}, {"uuid": "1d728f83-0dab-458e-849e-406d45b6d44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-01T17:00:53.469493Z"}, {"uuid": "d5616cfe-5a91-4860-b29a-ca27a22c8ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-01T20:02:46.713370Z"}, {"uuid": "088b7515-d6c7-4bb1-aa37-ef4bb4664ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/vulns/382", "content": "Microsoft Exchange Server RCE, CVE-2021-28482:\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-09-01T20:02:51.021156Z"}, {"uuid": "ec5c9c4f-a064-46ef-9e99-8ad99f395556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-02T01:03:22.961842Z"}, {"uuid": "a918ebab-9c85-4364-b600-7b2d51da5641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/vulns/382", "content": "Microsoft Exchange Server RCE, CVE-2021-28482:\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-09-02T01:03:26.740218Z"}, {"uuid": "1781dcd6-f6c2-449c-8dd4-6dbb1d28f435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-02T01:04:40.944358Z"}, {"uuid": "b0d337c2-e6da-4fd2-8cb6-ea2fd26493de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-02T01:04:43.684661Z"}]}