NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-21709

CVSS 3.1: 9.8 critical
EPSS: 2%p79
Published: Aug 8, 2023 · Aug 8, 2023
Modified: Aug 10, 2026

Analyze CVE-2023-21709 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Exchange Server Elevation of Privilege Vulnerability

Vendors: microsoft

Products: exchange server

Weakness: CWE-307

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news

3 stories

Microsoft Patch Tuesday, August 2023 Edition

Krebs on SecurityAug 9, 13:55 UTC · Aug 9, 2023VulnerabilityExploitedCVE-2023-36884 CVE-2023-38180 CVE-2023-21709+12

60

Microsoft Patches 80+ Flaws Including Two Zero

Infosecurity MagazineAug 9, 09:30 UTC · Aug 9, 2023VulnerabilityExploitedCVE-2023-36884 CVE-2023-38180 CVE-2023-21709+54

60

August 2023 Patch Tuesday: Microsoft fixes critical bugs in Teams, MSMQ

Help Net SecurityAug 8, 00:00 UTC · Aug 8, 2023VulnerabilityCVE-2023-38180 CVE-2023-36884 CVE-2023-21709+34 · 1 read

60