CVE-2023-21743

—1

CVSS 3.1

5.3 medium

EPSS

1%p64

Published

Jan 10, 2023 (Jan 10, 2023)

Modified

Jun 17, 2026

Description

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Vendors: microsoft
Products: sharepoint server
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news7 stories

CISA adds recently-announced Microsoft zero

The RecordFeb 3, 00:00 UTC · Feb 3, 2023Advisory in the wildCVE-2023-21674 CVE-2022-41080 CVE-2023-21743+1 CVEs

60

Over 100 CVEs Addressed in First Patch Tuesday of 2023

Infosecurity MagazineJan 11, 11:00 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21743 CVE-2023-21674 CVE-2023-21549+3 CVEs

60

Microsoft Patch Tuesday for January 2023 fixed actively exploited zero

Security AffairsJan 11, 08:05 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21561+58 CVEs1

60

Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero

The Hacker NewsJan 11, 06:34 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2022-41045 CVE-2022-41093+13 CVEs1

60

Microsoft Patch Tuesday, January 2023 Edition

Krebs on SecurityJan 11, 03:15 UTC · Jan 11, 2023Vulnerability CVE-2023-21743 CVE-2023-21674 CVE-2023-21678+3 CVEs

60

Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities

Cisco TalosJan 10, 20:28 UTC · Jan 10, 2023Vulnerability CVE-2023-21743 CVE-2023-21535 CVE-2023-21548+13 CVEs1

60

Microsoft plugs actively exploited zero-day hole (CVE-2023-21674)

Help Net SecurityJan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21743+4 CVEs1

60