1655 matches found
Privilege escalation
Microsoft Exchange Server Elevation of Privilege Vulnerability...
Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2021-34470
Microsoft Exchange Server Elevation of Privilege Vulnerability...
CVE-2021-34523 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2021-34470 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2021-34470 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2021-33768 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2021-33766 Microsoft Exchange Server Information Disclosure Vulnerability
...
CVE-2021-33766 Microsoft Exchange Server Information Disclosure Vulnerability
...
CVE-2021-31196 Microsoft Exchange Server Remote Code Execution Vulnerability
...
Four in-the-wild exploits, 13 critical patches headline bumper Patch Tuesday
The list of July 2021 Patch Tuesday updates looks endless. 117 patches with no less than 42 CVEs assigned to them that have FAQs, mitigations details or workarounds listed for them. Looking at the urgency levels Microsoft has assigned to them, system administrators have their work cut out for the...
CVE-2021-34473
Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: gwillcox-r7 at July 14, 2021 5:15pm UTC reported: From https://blog.talosintelligence.com/2021/07/microsoft-patch-tuesday-for-july-2021.html there was a note that this vulnerability seems to have been used in some...
CVE-2021-31196
Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2021-33766 ProxyToken
Microsoft Exchange Server Information Disclosure Vulnerability Recent assessments: NinjaOperator at August 30, 2021 4:59pm UTC reported: An unauthenticated actor can perform configuration actions on mailboxes belonging to arbitrary users. Which can be used to copy all emails addressed to a target...
ProxyShell Exploit Chain
Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: ccondon-r7 at August 12, 2021 9:19pm UTC reported: Check out the Rapid7 analysis for details on the exploit chain. Seems like a lot of the PoC implementations so far are using admin mailboxes, but I’d imagine folks...
