PULSEUnderground Intel

LIVE28signals / 24h

FEED

ransomn0n reclama a Company #86 · US · Not Foundransomn0n reclama a Company #85 · US · Not Foundransomn0n reclama a Company #84 · US · Not Foundransomeverest reclama a Kissei Shoji · JP · Manufacturingransomeverest reclama a Chugoku Bend · Manufacturingransomeverest reclama a Taekwang Network · KR · Technologyransomeverest reclama a Brenner Base Tunnel · AT · Transportationransomn0n reclama a Prafesta Ind. e Com. de Embalagens Ltda · BR · Manufacturingransomplay reclama a WSBI-ESBG · BE · Financial Servicesransomplay reclama a New Tec Tool Limited · HK · Manufacturingransomplay reclama a MicroSearch Corporation · Technologyransomplay reclama a Pure Options · Financial Servicesransomredact reclama a ONEOK, Inc. · US · Energy & Utilitiesransomvexy ransomware reclama a Data-Core Systems · Technologyransomn0n reclama a Company #86 · US · Not Foundransomn0n reclama a Company #85 · US · Not Foundransomn0n reclama a Company #84 · US · Not Foundransomeverest reclama a Kissei Shoji · JP · Manufacturingransomeverest reclama a Chugoku Bend · Manufacturingransomeverest reclama a Taekwang Network · KR · Technologyransomeverest reclama a Brenner Base Tunnel · AT · Transportationransomn0n reclama a Prafesta Ind. e Com. de Embalagens Ltda · BR · Manufacturingransomplay reclama a WSBI-ESBG · BE · Financial Servicesransomplay reclama a New Tec Tool Limited · HK · Manufacturingransomplay reclama a MicroSearch Corporation · Technologyransomplay reclama a Pure Options · Financial Servicesransomredact reclama a ONEOK, Inc. · US · Energy & Utilitiesransomvexy ransomware reclama a Data-Core Systems · Technology

CVE Watch—

CVE-2024-21410

Microsoft Exchange Server Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

12.6%

p96

KEV

YES

Feb 15, 2024

Exploit Today

79

0-100

Published: — · Last modified: —

EPSS · 30d

12.6%EPSS · 30 days12.6%

2026-09-182026-10-16

KEV catalog record

Product

Microsoft / Exchange Server

Vulnerability

Microsoft Exchange Server Privilege Escalation Vulnerability

Added to KEV

Feb 15, 2024

Remediate by

Mar 7, 2024

Known ransomware use

No

Summary description

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://nvd.nist.gov/vuln/detail/CVE-2024-21410

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-215298.8 HIG

KEV—80Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability59d CVE-2022-410808.8 HIG

KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability68d CVE-2021-345239.0 CRI

KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability68d CVE-2021-344739.1 CRI

KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability68d CVE-2021-337667.3 HIG

KEV—80Microsoft Exchange Server Information Disclosure68d CVE-2021-311967.2 HIG

KEV—80Microsoft Exchange Server Information Disclosure Vulnerability68d