3051 matches found
CVE-2021-34470
CVE-2021-34470 is a Microsoft Exchange Server Elevation of Privilege vulnerability. Public docs indicate it is addressed by Exchange Cumulative Updates (e.g., KB5004778 for Exchange 2013 and KB5003611/KB5003612 for newer Exchange versions). Technical details on root cause and exploit specifics ar...
CVE-2021-33768 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2021-33766 Microsoft Exchange Server Information Disclosure Vulnerability
...
CVE-2021-33766 Microsoft Exchange Server Information Disclosure Vulnerability
...
CVE-2021-31206
CVE-2021-31206 is a Microsoft Exchange Server remote code execution vulnerability from the ProxyShell family. The connected documents confirm an exposed Exchange server could be compromised by exploiting ProxyShell vulnerabilities (CVE-2021-34473, CVE-2021-34523, CVE-2021-31207) to gain initial a...
CVE-2021-31196
Technical details about CVE-2021-31196 are not publicly available in the provided connected documents. The materials describe a Microsoft Exchange Server vulnerability at a high level, but do not specify affected products, versions, root cause, or fixes. Monitor for updates.
CVE-2021-31196 Microsoft Exchange Server Remote Code Execution Vulnerability
...
Four in-the-wild exploits, 13 critical patches headline bumper Patch Tuesday
The list of July 2021 Patch Tuesday updates looks endless. 117 patches with no less than 42 CVEs assigned to them that have FAQs, mitigations details or workarounds listed for them. Looking at the urgency levels Microsoft has assigned to them, system administrators have their work cut out for the...
CVE-2021-34473
Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: gwillcox-r7 at July 14, 2021 5:15pm UTC reported: From https://blog.talosintelligence.com/2021/07/microsoft-patch-tuesday-for-july-2021.html there was a note that this vulnerability seems to have been used in some...
CVE-2021-31196
Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
ProxyShell Exploit Chain
Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: ccondon-r7 at August 12, 2021 9:19pm UTC reported: Check out the Rapid7 analysis for details on the exploit chain. Seems like a lot of the PoC implementations so far are using admin mailboxes, but I’d imagine folks...
CVE-2021-33766 ProxyToken
Microsoft Exchange Server Information Disclosure Vulnerability Recent assessments: NinjaOperator at August 30, 2021 4:59pm UTC reported: An unauthenticated actor can perform configuration actions on mailboxes belonging to arbitrary users. Which can be used to copy all emails addressed to a target...
Microsoft Exchange Server Remote Code Execution (CVE-2021-34473; CVE-2021-34523)
A remote code execution vulnerability exists in Microsoft Exchange. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Patch Tuesday, July 2021 Edition
Microsoft today released updates to patch at least 116 security holes in its Windows operating systems and related software. At least four of the vulnerabilities addressed today are under active attack, according to Microsoft. Thirteen of the security bugs quashed in this months release earned...
Microsoft Exchange Server Information Disclosure Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: April 13, 2021 (KB5001779)
None None...
Description of the security update for Microsoft Exchange Server 2019: July 13, 2021 (KB5004780)
None None...