Information disclosure

Microsoft Exchange Server Information Disclosure Vulnerability...

Remote code execution

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2023-36777

Technical details about CVE-2023-36777 are not publicly provided in the supplied documents. No explicit affected product/version or remediation is described here. Monitor for updates from official advisories and vendor advisories.

CVE-2023-36744 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2023-36744

CVE-2023-36744 is a Microsoft Exchange Server Remote Code Execution vulnerability. The CIRCL sighting and related ZDI write-up describe exploitation through a DLL loading chain enabling in-the-wild RCE against Exchange; affected product is Exchange Server, with remediation tied to security update...

CVE-2023-36744 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2023-36756 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2023-36745 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2023-36756 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2023-36745

CVE-2023-36745 is a Microsoft Exchange Server Remote Code Execution vulnerability. Connected sources provide concrete exploit details: a GitHub repo labeled as a CVE-2023-36745 exploit (Deserialization of Untrusted Data in Microsoft), with a PoC and example commands to trigger RCE (PowerShell/DLL...

CVE-2023-36745 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2023-36756

CVE-2023-36756 is a Microsoft Exchange Server Remote Code Execution vulnerability. The initial data lists an 8.0/3.1 CVSS with high impact. A community post (AVuleonov) notes that three Exchange RCEs were addressed in August 2023 and states exploitation would require LAN access and valid Exchange...

CVE-2023-36757 Microsoft Exchange Server Spoofing Vulnerability

...

Microsoft Exchange Server Remote Code Execution Vulnerability

...

Microsoft Exchange Server Spoofing Vulnerability

...

Description of version 2 of the security update for Microsoft Exchange Server 2019 and 2016: August 15, 2023 (KB5030524)

None None...

Microsoft Exchange Server Information Disclosure Vulnerability

...

Microsoft Exchange Server Remote Code Execution Vulnerability

...

Microsoft Exchange Server Remote Code Execution Vulnerability

...

PT-2023-5053 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the Microsoft Exchange Server, allowing a remote attacker to conduct spoofing attacks. This can...