1657 matches found
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation...
VulnCheck KEV: CVE-2024-21410
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation...
CVE-2024-21410
Microsoft Exchange Server Elevation of Privilege Vulnerability...
CVE-2024-21410
CVE-2024-21410 is a Microsoft Exchange Server Elevation of Privilege vulnerability with CVSS v3.1 base score 9.8 (CRITICAL). Affected products include Exchange Server 2016 CU23 and 2019 CU13/CU14. Public exploits exist; there are indications of exploitation in the wild per CISA KEV and vendor adv...
CVE-2024-21410 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2024-21410 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
KLA63959 PE vulnerability in Microsoft Server Software
An elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-21410 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Exchange-Server CVE list...
PT-2024-1645
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions prior to 2019 Cumulative Update 14 Description The vulnerability in Microsoft Exchange Server allows attackers to escalate privileges in NTLM relay attacks, potentially leading to unauthorized access to...
Security Updates for Microsoft Exchange Server (February 2024)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the Feb, 2024 security bulletin. - Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2024-21410 While Exchange Server 2016 is...
Agent Racoon Backdoor Targets Organizations in Middle East, Africa, and U.S.
Organizations in the Middle East, Africa, and the U.S. have been targeted by an unknown threat actor to distribute a new backdoor called Agent Racoon. "This malware family is written using the .NET framework and leverages the domain name service DNS protocol to create a covert channel and provide...
The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the IsUNCPath method in Microsoft Exchange Server servers allows attackers to perform spoofing attacks.
The vulnerability of the IsUNCPath method in Microsoft Exchange Server’s mail server is related to insufficient protection of service data during NTLM authentication. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
Play Ransomware Goes Commercial - Now Offered as a Service to Cybercriminals
The ransomware strain known as Play is now being offered to other threat actors "as a service," new evidence unearthed by Adlumin has revealed. "The unusual lack of even small variations between attacks suggests that they are being carried out by affiliates who have purchased the...
Microsoft Exchange Server Spoofing Vulnerability (CNVD-2024-37492)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by an attack...
Microsoft Patch Tuesday, November 2023 Edition
Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three "zero day" vulnerabilities that Microsoft warns are already being exploited in active attacks. The zero-day threats targeting Microsoft this month...
CVE-2023-36439
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2023-36050
Microsoft Exchange Server Spoofing Vulnerability...
CVE-2023-36039
Microsoft Exchange Server Spoofing Vulnerability...