CVE-2024-21410
Microsoft Exchange Server Privilege Escalation Vulnerability
CVSS
—
Sem CVSS
EPSS
12.7%
p96
KEV
SIM
15 de fev. de 2024
Exploit Today
79
0-100
Publicado: — · Última mod.: —
12.6%EPSS · 30 dias12.7%
2026-10-082026-11-05
Produto
Microsoft / Exchange Server
Vulnerabilidade
Microsoft Exchange Server Privilege Escalation Vulnerability
Adicionado ao KEV
15 de fev. de 2024
Corrigir até
7 de mar. de 2024
Uso conhecido em ransomware
Não
Descrição resumida
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://nvd.nist.gov/vuln/detail/CVE-2024-21410
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2023-215298.8 ALT99.1%
KEV—80Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability78dCVE-2022-410808.8 ALT99.6%
KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability87dCVE-2021-345239.0 CRÍ100.0%
KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability87dCVE-2021-344739.1 CRÍ100.0%
KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability87dCVE-2021-337667.3 ALT99.9%
KEV—80Microsoft Exchange Server Information Disclosure87dCVE-2021-311967.2 ALT99.0%
KEV—80Microsoft Exchange Server Information Disclosure Vulnerability87d