NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability2 · 1 read

CVE-2023-21763

CVSS 3.1: 7.8 high
EPSS: <1%p47
Published: Jan 10, 2023 · Jan 10, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-21763 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Exchange Server Elevation of Privilege Vulnerability

Vendors: microsoft

Products: exchange server

Weakness: CWE-426

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

5 stories

CISA adds recently-announced Microsoft zero

The RecordFeb 3, 00:00 UTC · Feb 3, 2023AdvisoryExploitedCVE-2023-21674 CVE-2022-41080 CVE-2023-21743+12 · 1 read

60

Over 100 CVEs Addressed in First Patch Tuesday of 2023

Infosecurity MagazineJan 11, 11:00 UTC · Jan 11, 2023VulnerabilityExploitedCVE-2023-21743 CVE-2023-21674 CVE-2023-21549+31

60

Microsoft Patch Tuesday for January 2023 fixed actively exploited zero

Security AffairsJan 11, 08:05 UTC · Jan 11, 2023VulnerabilityExploitedCVE-2023-21674 CVE-2023-21549 CVE-2023-21561+582 · 1 read

60

Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero

The Hacker NewsJan 11, 06:34 UTC · Jan 11, 2023VulnerabilityExploitedCVE-2023-21674 CVE-2022-41045 CVE-2022-41093+132 · 1 read

60

Microsoft plugs actively exploited zero-day hole (CVE-2023-21674)

Help Net SecurityJan 10, 00:00 UTC · Jan 10, 2023Exploit / PoCExploitedCVE-2023-21674 CVE-2023-21549 CVE-2023-21743+42

60