CVE-2023-21529

🗓️ 14 Feb 2023 20:15:11Reported by [email protected]Type

Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2023-21529

Reporter	Title	Published	Views	Family All 29
ATTACKERKB	CVE-2023-21529	14 Feb 202320:15	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP	25 Jun 202300:35	–	avleonov
Information Security Automation	Microsoft Patch Tuesday February 2023: Win Graphics RCE, Edge RCE, Publisher SFB, CLFS EoP, Exchange RCEs, Word RCE, HoloLens1	26 Feb 202316:37	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Exchange Server servers, related to the use of dangerous methods or functions, allows attackers to execute arbitrary code.	27 Feb 202300:00	–	bdu_fstec
Circl	CVE-2023-21529	22 Feb 202303:33	–	circl
CISA KEV Catalog	Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability	13 Apr 202600:00	–	cisa_kev
CISA	CISA Adds Seven Known Exploited Vulnerabilities to Catalog	13 Apr 202612:00	–	cisa
CNNVD	Microsoft Exchange Server 安全漏洞	14 Feb 202300:00	–	cnnvd
CNVD	Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-51372)	17 Feb 202300:00	–	cnvd
CVE	CVE-2023-21529	14 Feb 202319:33	–	cve

NVD

Node

microsoft exchange_serverMatch2013cumulative_update_23

microsoft exchange_serverMatch2016cumulative_update_23

microsoft exchange_serverMatch2019cumulative_update_11

microsoft exchange_serverMatch2019cumulative_update_12

Source	Link
microsoft	www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 05:33Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

EPSS0.62104