CVE-2023-21763

—

CVSS 3.1

7.8 high

EPSS

<1%p47

Published

Jan 10, 2023 (Jan 10, 2023)

Modified

Jun 17, 2026

Description

Microsoft Exchange Server Elevation of Privilege Vulnerability

Vendors: microsoft
Products: exchange server
Weakness: CWE-426
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news5 stories

CISA adds recently-announced Microsoft zero

The RecordFeb 3, 00:00 UTC · Feb 3, 2023Advisory in the wildCVE-2023-21674 CVE-2022-41080 CVE-2023-21743+1 CVEs

60

Over 100 CVEs Addressed in First Patch Tuesday of 2023

Infosecurity MagazineJan 11, 11:00 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21743 CVE-2023-21674 CVE-2023-21549+3 CVEs

60

Microsoft Patch Tuesday for January 2023 fixed actively exploited zero

Security AffairsJan 11, 08:05 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21561+58 CVEs1

60

Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero

The Hacker NewsJan 11, 06:34 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674 CVE-2022-41045 CVE-2022-41093+13 CVEs1

60

Microsoft plugs actively exploited zero-day hole (CVE-2023-21674)

Help Net SecurityJan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2023-21674 CVE-2023-21549 CVE-2023-21743+4 CVEs1

60