High 1 exploited CVE WID-SEC-2023-0368 4 CVEs

Microsoft Exchange: Mehrere Schwachstellen ermöglichen Codeausführung

Published Feb 14, 2023 · Updated Apr 13, 2026 · Revision 3 · de-DE

Vendor: Microsoft Product: Exchange Server 2013 Product: Exchange Server 2016 Product: Exchange Server 2019 Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft Exchange Server 2013, Microsoft Exchange Server 2016 und Microsoft Exchange Server 2019 ausnutzen, um beliebigen Programmcode auszuführen.

Product

Microsoft Exchange Server ist das Serverprodukt für das Client-Server Groupware- und Nachrichtensystem der Firma Microsoft.

Vulnerabilities 4

High 8.8

CVE-2023-21529 Exploited · Ransomware EPSS 59%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Feb 14, 2023
KEV Apr 13, 2026
High 8.8

CVE-2023-21706

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Feb 14, 2023
High 8.8

CVE-2023-21707 Public exploit EPSS 80%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Feb 14, 2023
High 7.2

CVE-2023-21710

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 11

Feb 14, 2023

Revision history

2026-04-13 #3
Aktive Ausnutzung gemeldet
2023-02-16 #2
Korrektur
2023-02-14 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2023-02-14
https://msrc.microsoft.com/update-guide
CISA Known Exploited Vulnerabilities Catalog vom 2026-04-13
https://www.cisa.gov/known-exploited-vulnerabilities-catalog