High 1 exploited CVE MSRC-CVE-2021-34523 1 CVE

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published Jul 13, 2021 · Updated Jul 13, 2021

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.

Details

Security updates
15.00.1497.015 — https://support.microsoft.com/help/5001779

Vulnerabilities 1

Critical 9.0

CVE-2021-34523 Exploited · Ransomware Public exploit EPSS 100%

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8

Jul 14, 2021
KEV Nov 3, 2021

Revision history

2021-07-13 #1
Information published. This CVE was addressed by updates that were released in April 2021, but the CVE was inadvertently omitted from the April 2021 Security Updates. This is an informational change only. Customers who have already installed the April 2021 update do not need to take any further action.

References

CVE-2021-34523 Microsoft Exchange Server Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34523
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss