{"id":"CVE-2021-26858","revision":"079fe269ee8942988e34ea68ad1093ff","records":[{"revision":"079fe269ee8942988e34ea68ad1093ff","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2021-26858","aliases":[],"title":"Microsoft Exchange Server Remote Code Execution Vulnerability","description":"Microsoft Exchange Server Remote Code Execution Vulnerability","state":0,"publishedAt":"2021-03-02T23:55:27+00:00","modifiedAt":"2026-10-01T20:12:19.501+00:00","affected":[{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2013 Cumulative Update 21","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2013 Cumulative Update 21\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.00.0\",\n \"lessThan\": \"15.00.1395.012\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2013 Cumulative Update 22","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2013 Cumulative Update 22\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.00.0\",\n \"lessThan\": \"15.00.1473.006\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2013 Cumulative Update 23","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2013 Cumulative Update 23\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.00.0\",\n \"lessThan\": \"15.00.1497.012\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 10","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 10\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.1531.012\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 11","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 11\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.1591.018\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 12","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 12\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.1713.010\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 13","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 13\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.1779.008\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 14","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 14\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.1847.012\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 15","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 15\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.1913.012\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 16","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 16\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.1979.008\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 17","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 17\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.2044.013\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 18","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 18\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.2106.013\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 19","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 19\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.2176.009\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 8\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.1415.010\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2016 Cumulative Update 9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2016 Cumulative Update 9\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.01.0\",\n \"lessThan\": \"15.01.1466.016\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2019","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2019\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.02.0\",\n \"lessThan\": \"15.02.0221.018\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2019 Cumulative Update 1","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2019 Cumulative Update 1\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.02.0\",\n \"lessThan\": \"15.01.1979.006\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2019 Cumulative Update 2","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2019 Cumulative Update 2\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.02.0\",\n \"lessThan\": \"15.02.0397.011\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2019 Cumulative Update 3","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2019 Cumulative Update 3\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.02.0\",\n \"lessThan\": \"15.02.0464.015\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2019 Cumulative Update 4","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2019 Cumulative Update 4\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.02.0\",\n \"lessThan\": \"15.02.0659.012\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2019 Cumulative Update 5","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2019 Cumulative Update 5\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.02.0\",\n \"lessThan\": \"15.02.0595.008\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2019 Cumulative Update 6","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2019 Cumulative Update 6\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.02.0\",\n \"lessThan\": \"15.02.0529.013\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2019 Cumulative Update 7","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2019 Cumulative Update 7\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.02.0\",\n \"lessThan\": \"15.02.0721.013\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Microsoft Exchange Server 2019 Cumulative Update 8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Microsoft Exchange Server 2019 Cumulative Update 8\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"15.02.0\",\n \"lessThan\": \"15.02.0792.010\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","score":7.8,"severity":"HIGH"}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-26858","license":"CVE Program Terms of Use","key":"cve-program:CVE-2021-26858","identifiers":["CVE-2021-26858"]},"retained":false,"historicalAffected":[]}],"coverage":[]}