CVE2021

CVE-2021-26857

1Rules

1References

1Folders

2023-02-07Latest

Summary

CVE-2021-26857 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2021. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threathighstable

Potential CVE-2021-26857 Exploitation Attempt

Detects possible successful exploitation for vulnerability described in CVE-2021-26857 by looking for | abnormal subprocesses spawning by Exchange Server's Unified Messaging service

WindowsProcess Creation

T1203 · Exploitation for Client ExecutionTA0002 · Executioncve.2021-26857detection.emerging-threats

Bhabesh RajWed Mar 032021

References

Resolving title…

microsoft.com