Cyber threats / Vulnerabilities

CVE-2021-34523

Microsoft Exchange Server Privilege Escalation Vulnerability
100.0%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

Vendor
Microsoft
Product
Exchange Server
Added to KEV
Nov 3, 2021
Remediation due
Nov 17, 2021 (US federal deadline)
Ransomware use
Known
Weakness
CWE-287
EPSS
100.0% as of Nov 10
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded
References