Vulnerability fixed in Microsoft Exchange Server

A vulnerability has been fixed in Microsoft Exchange Server. The vulnerability allows an authenticated malicious party to obtain obtain elevated privileges. To exploit the vulnerability the malicious party must have access to the Exchange Server and be authenticated with elevated privileges. If t...

Security Updates for Exchange (May 2022)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note: Additional security hardening measures, described in the kb article, are...

CVE-2022-21978 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2022-21978

CVE-2022-21978 is a Microsoft Exchange Server elevation-of-privilege vulnerability. Affected products include Exchange Server 2013/2016/2019 with local, authenticated access required to exploit; the root cause is exploitation of elevated-privilege workflows that can lead to domain-privilege takeo...

Patch Tuesday - May 2022

This month is par for the course in terms of both number and severity of vulnerabilities being patched by Microsoft. That means there’s plenty of work to be done by system and network administrators, as usual. There is one 0-day this month: CVE-2022-26925, a Spoofing vulnerability in the Windows...

KLA12527 Elevation of privilege vulnerability in Microsoft Server Software

Elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-21978 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Exchange-Server CVE list...