18049 matches found
VulnCheck KEV: CVE-2024-21410
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation...
Fat Patch Tuesday, February 2024 Edition
Microsoft Corp. today pushed software updates to plug more than 70 security holes in its Windows operating systems and related products, including two zero-day vulnerabilities that are already being exploited in active attacks. Top of the heap on this Fat Patch Tuesday is CVE-2024-21412, a...
CVE-2024-21410
Microsoft Exchange Server Elevation of Privilege Vulnerability...
CVE-2024-21410
Microsoft Exchange Server Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Exchange Server Elevation of Privilege Vulnerability...
CVE-2024-21410 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2024-21410 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2024-21410
CVE-2024-21410 is a Microsoft Exchange Server Elevation of Privilege vulnerability with CVSS v3.1 base score 9.8 (CRITICAL). Affected products include Exchange Server 2016 CU23 and 2019 CU13/CU14. Public exploits exist; there are indications of exploitation in the wild per CISA KEV and vendor adv...
Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know
The Midnight Blizzard and Cloudflare-Atlassian cybersecurity incidents raised alarms about the vulnerabilities inherent in major SaaS platforms. These incidents illustrate the stakes involved in SaaS breaches — safeguarding the integrity of SaaS apps and their sensitive data is critical but is no...
gnutls: incomplete fix for CVE-2023-5981
A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Description of Security Update 12 for Exchange Server 2016: March 12, 2024 (KB5036386)
None None...
Cumulative Update 14 for Exchange Server 2019 (KB5035606)
None None...
PT-2024-1645
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions prior to 2019 Cumulative Update 14 Description The vulnerability in Microsoft Exchange Server allows attackers to escalate privileges in NTLM relay attacks, potentially leading to unauthorized access to...
Microsoft Exchange Server Security Vulnerability
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening. A security vulnerability exists in Microsoft Exchange Server. The following products and versions a...
CVE-2024-21410
Microsoft Exchange Server Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Security Updates for Microsoft Exchange Server (February 2024)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the Feb, 2024 security bulletin. - Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2024-21410 While Exchange Server 2016 is...
CVE-2024-21410: Improper Authentication
Microsoft Exchange Server Elevation of Privilege Vulnerability...
Vulnerability fixed in Microsoft Exchange
Microsoft has fixed a vulnerability in Exchange Server. A malicious party could exploit the vulnerability to use a previously stolen NTLM hash to gain access to the account and the data of the victim. Successful exploitation thus requires a previous successful attack on a client that uses NTLM...
