CVE-2023-21709

—

CVSS 3.1

9.8 critical

EPSS

2%p79

Published

Aug 8, 2023 (Aug 8, 2023)

Modified

Aug 10, 2026

Description

Microsoft Exchange Server Elevation of Privilege Vulnerability

Vendors: microsoft
Products: exchange server
Weakness: CWE-307
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news3 stories

Microsoft Patch Tuesday, August 2023 Edition

Krebs on SecurityAug 9, 13:55 UTC · Aug 9, 2023Vulnerability in the wildCVE-2023-36884 CVE-2023-38180 CVE-2023-21709+1 CVEs

60

Microsoft Patches 80+ Flaws Including Two Zero

Infosecurity MagazineAug 9, 09:30 UTC · Aug 9, 2023Vulnerability in the wildCVE-2023-36884 CVE-2023-38180 CVE-2023-21709+5 CVEs

60

August 2023 Patch Tuesday: Microsoft fixes critical bugs in Teams, MSMQ

Help Net SecurityAug 8, 00:00 UTC · Aug 8, 2023Vulnerability CVE-2023-38180 CVE-2023-36884 CVE-2023-21709+3 CVEs1

60