NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability2 · 1 read

CVE-2022-24477

CVSS 3.1: 8.0 high
EPSS: 2%p81
Published: Aug 9, 2022 · Aug 9, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-24477 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Exchange Server Elevation of Privilege Vulnerability

Vendors: microsoft

Products: exchange server

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news

5 stories

Microsoft fixes exploited zero-day in Windows Support Diagnostic Tool (CVE-2022-34713)

Help Net SecurityDec 12, 12:03 UTC · Dec 12, 2023Exploit / PoCExploitedCVE-2022-34713 CVE-2022-30134 CVE-2017-11882+42 · 1 read

60

Microsoft Issues Patches for 121 Flaws, Including Zero

The Hacker NewsAug 11, 08:22 UTC · Aug 11, 2022VulnerabilityExploitedCVE-2022-34713 CVE-2022-30190 CVE-2022-35743+43 · 1 read

60

Microsoft Patch Tuesday, August 2022 Edition

Krebs on SecurityAug 10, 04:32 UTC · Aug 10, 2022VulnerabilityCVE-2022-34713 CVE-2022-35743 CVE-2022-30134+52

60

Patch Tuesday for August 2022 fixed actively exploited zero

Security AffairsAug 9, 21:25 UTC · Aug 9, 2022VulnerabilityExploitedCVE-2022-34713 CVE-2022-30133 CVE-2022-35744+463

60

Microsoft Patch Tuesday for August 2022 — Snort rules and prominent vulnerabilities

Cisco TalosAug 9, 20:44 UTC · Aug 9, 2022VulnerabilityExploitedCVE-2022-35743 CVE-2022-34713 CVE-2022-21980+131

60