High severity8.8NVD Advisory· Published Mar 11, 2021· Updated Aug 19, 2026
CVE-2021-27076
CVE-2021-27076
Description
Microsoft SharePoint Server Remote Code Execution Vulnerability
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:a:microsoft:business_productivity_servers:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*+ 2 more
- cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27076nvdPatchVendor Advisory
- www.zerodayinitiative.com/advisories/ZDI-21-276/nvdThird Party Advisory
- msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27076nvd
News mentions
2- New SharkLoader Malware Deploys Cobalt Strike in StrikeShark CyberattacksThe Hacker News · Jun 26, 2026
- StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoaderSecurelist · Jun 24, 2026