1657 matches found
CVE-2022-41040 and CVE-2022-41082: Unpatched Zero-Day Vulnerabilities in Microsoft Exchange Server
On Thursday, September 29, a Vietnamese security firm called GTSC published information and IOCs on what they claimed was a pair of unpatched Microsoft Exchange Server vulnerabilities being used in attacks on their customers’ environments dating back to early August 2022. The impact of...
PT-2022-34582 · Microsoft · Exchange Server
Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server version Exchange Server 2019 and possibly earlier Description: An undisclosed vulnerability exists in an undisclosed component of Microsoft Exchange Server, allowing for remote code execution via network attack. Publ...
PT-2022-4887
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in Microsoft Exchange Server, allowing attackers to affect the system. It is also associated with a Server-Si...
PT-2022-4888
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A vulnerability in Microsoft Exchange Server is related to errors in code generation management. Exploitation of this issue may allow a remote attacker to execute arbitrary...
VulnCheck KEV: CVE-2021-31196
Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution...
VulnCheck KEV: CVE-2021-33768
Microsoft Exchange Server Elevation of Privilege Vulnerability...
Microsoft Warns of Ransomware Attacks by Iranian Phosphorus Hacker Group
Microsoft's threat intelligence division on Wednesday assessed that a subgroup of the Iranian threat actor tracked as Phosphorus is conducting ransomware attacks as a "form of moonlighting" for personal gain. The tech giant, which is monitoring the activity cluster under the moniker DEV-0270 aka...
The vulnerability of Microsoft Exchange Server servers, related to the disclosure of information, allows attackers to gain unauthorized access to protected information.
The vulnerability of Microsoft Exchange Server servers is related to the exposure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Microsoft Exchange Server servers, related to deficiencies in access control, allows attackers to increase their privileges.
The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of Microsoft Exchange Server servers, related to the disclosure of information, allows attackers to gain unauthorized access to protected information.
The vulnerability of Microsoft Exchange Server servers is related to the exposure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Microsoft Exchange Server mail server, related to deficiencies in access control, allows attackers to disclose protected information.
The vulnerability of Microsoft Exchange Server servers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
Security Updates for Exchange (August 2022)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21979,CVE-2022-30134,...
Microsoft Patches ‘Dogwalk’ Zero-Day and 17 Critical Flaws
Microsoft is urging users to patch a zero-day vulnerability dubbed Dogwalk that is actively being exploited in the wild. The bug CVE-2022-34713 is tied to a Microsoft Windows Support Diagnostic Tool and allows a remote attacker to execute code on a vulnerable system. “The volume of fixes released...
CVE-2022-34692
Microsoft Exchange Server Information Disclosure Vulnerability...
CVE-2022-24477
Microsoft Exchange Server Elevation of Privilege Vulnerability...
CVE-2022-21980
Microsoft Exchange Server Elevation of Privilege Vulnerability...
CVE-2022-30134
Microsoft Exchange Server Information Disclosure Vulnerability...
CVE-2022-21979
Microsoft Exchange Server Information Disclosure Vulnerability...
