CVE-2024-21410
Microsoft Exchange Server Privilege Escalation Vulnerability
CVSS
—
Sin CVSS
EPSS
12.6%
p96
KEV
SÍ
15 feb 2024
Exploit Today
79
0-100
Publicado: — · Última mod.: —
12.6%EPSS · 30 días12.6%
2026-09-172026-10-15
Producto
Microsoft / Exchange Server
Vulnerabilidad
Microsoft Exchange Server Privilege Escalation Vulnerability
Añadido a KEV
15 feb 2024
Remediar antes de
7 mar 2024
Uso conocido en ransomware
No
Descripción resumida
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
Acción requerida
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://nvd.nist.gov/vuln/detail/CVE-2024-21410
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-215298.8 ALT99.1%
KEV—80Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability58dCVE-2022-410808.8 ALT99.6%
KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability67dCVE-2021-345239.0 CRÍ100.0%
KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability67dCVE-2021-344739.1 CRÍ100.0%
KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability67dCVE-2021-337667.3 ALT99.9%
KEV—80Microsoft Exchange Server Information Disclosure67dCVE-2021-311967.2 ALT99.0%
KEV—80Microsoft Exchange Server Information Disclosure Vulnerability67d