Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero-Day Exploit

The first Patch Tuesday fixes shipped by Microsoft for 2023 have addressed a total of 98 security flaws, including one bug that the company said is being actively exploited in the wild. 11 of the 98 issues are rated Critical and 87 are rated Important in severity, with one of the vulnerabilities...

CVE-2023-21764

Microsoft Exchange Server Elevation of Privilege Vulnerability...

CVE-2023-21764

CVE-2023-21764 is an Elevation of Privilege vulnerability in Microsoft Exchange Server. Public materials confirm it affects Exchange Server 2019 and 2016 families (CUs noted in linked KBs) and is addressed by the January 2023 security update (KB5022143 for Exchange Server 2016/2019; KB5022193 for...

KLA20155 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange Server can be...

CVE-2023-21764 Microsoft Exchange Server Elevation of Privilege Vulnerability

...