High severity8.8NVD Advisory· Published Mar 11, 2021· Updated Jun 17, 2026
CVE-2021-27076
CVE-2021-27076
Description
Microsoft SharePoint Server Remote Code Execution Vulnerability
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:business_productivity_servers:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27076nvdPatchVendor Advisory
- www.zerodayinitiative.com/advisories/ZDI-21-276/nvdThird Party Advisory
News mentions
2- New SharkLoader Malware Deploys Cobalt Strike in StrikeShark CyberattacksThe Hacker News · Jun 26, 2026
- StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoaderSecurelist · Jun 24, 2026