1657 matches found
CVE-2023-36778 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2023-36778 Microsoft Exchange Server Remote Code Execution Vulnerability
...
Description of the security update for Microsoft Exchange Server 2019 and 2016: October 10, 2023 (KB5030877)
None None...
Security Updates for Microsoft Exchange Server (October 2023)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the Oct, 2023 security bulletin. - Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2023-36778 Note that Nessus has not tested f...
Vulnerabilities fixed in Microsoft Exchange Server
Microsoft has fixed a vulnerability in Exchange Server. A malicious party could potentially exploit the vulnerability to execute arbitrary code under SYSTEM privileges. For successful exploitation, the malicious party must be authenticated and authorized on the local network. As far as is known,...
KLA61360 ACE vulnerability in Microsoft Server Software
A remote code execution vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2023-36778 Related products Microsoft-Exchange-Server CVE list CVE-2023-36778 critical KB list 5030877 Solution Install...
The vulnerability of the ProjectInstance class in the Microsoft Exchange Server mail server allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ProjectInstance class in Microsoft Exchange Server involves deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in authentication procedures, allows attackers to carry out spear-phishing attacks.
The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks remotely...
The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Microsoft Exchange Server’s mail server, related to access control errors, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the server’s account context through a remote network call...
Microsoft Patch Tuesday for September 2023 — Unusually low 5 critical vulnerabilities included in Microsoft Patch Tuesday, along with two zero-days
Microsoft disclosed 65 vulnerabilities across its suite of products and software Tuesday, only five of which are considered critical, which is very low compared to Microsofts usual security updates. However, there are two issues disclosed and patched this month that have already been exploited in...
CVE-2023-36777
Microsoft Exchange Server Information Disclosure Vulnerability...
CVE-2023-36744
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2023-36744
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2023-36756
Microsoft Exchange Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability...
Information disclosure
Microsoft Exchange Server Information Disclosure Vulnerability...
CVE-2023-36744 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2023-36744
CVE-2023-36744 is a Microsoft Exchange Server Remote Code Execution vulnerability. The CIRCL sighting and related ZDI write-up describe exploitation through a DLL loading chain enabling in-the-wild RCE against Exchange; affected product is Exchange Server, with remediation tied to security update...