CVE-2021-34523
Microsoft Exchange Server Privilege Escalation Vulnerability
CVSS
9.0
Crítica
EPSS
100.0%
p100
KEV
SIM
3 de nov. de 2021
Exploit Today
80
0-100
Publicado: 14 de jul. de 2021 · Última mod.: 10 de ago. de 2026
100.0%EPSS · 30 dias100.0%
2026-10-082026-11-05
Produto
Microsoft / Exchange Server
Vulnerabilidade
Microsoft Exchange Server Privilege Escalation Vulnerability
Adicionado ao KEV
3 de nov. de 2021
Corrigir até
17 de nov. de 2021
Uso conhecido em ransomware
Sim
Descrição resumida
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-34523
Microsoft Exchange Server Elevation of Privilege Vulnerability
- msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34523
- packetstormsecurity.comhttp://packetstormsecurity.com/files/163895/Microsoft-Exchange-ProxyShell-Remote-Code-Execution.html
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34523
- www.zerodayinitiative.comhttps://www.zerodayinitiative.com/advisories/ZDI-21-822/
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-34523
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2023-215298.8 ALT99.1%
KEV—80Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability78dCVE-2022-410808.8 ALT99.6%
KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability87dCVE-2021-344739.1 CRÍ100.0%
KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability87dCVE-2021-337667.3 ALT99.9%
KEV—80Microsoft Exchange Server Information Disclosure87dCVE-2021-311967.2 ALT99.0%
KEV—80Microsoft Exchange Server Information Disclosure Vulnerability87dCVE-2021-270657.8 ALT100.0%
KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability35d