Exploit / PoCcriticalExploited in the wild

Critical Exchange Server Flaw (CVE-2024

The Hacker Newsby @TheHackersNewsFeb 17, 2024 · 07:27 UTC (Feb 17, 2024)2 min read7 · 2 reads

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-21410 CVE-2024-21351 CVE-2024-21412 CVE-2024-21413

Tags: cve-2024-21410 cve-2024-21351 cve-2024-21412 cve-2024-21413 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-21412 +1 related CVE CVE-2024-21351	CVE-2024-21412: Security Feature Bypass in Microsoft Windows Internet Shortcut Files	8.1 group max	99%	KEVRansomware	Feb 13, 2024 KEV Feb 13, 2024
CVE-2024-21410	Privilege Escalation via NTLM Relay Flaw in Microsoft Exchange Server	9.8	13%	KEV	Feb 13, 2024 KEV Feb 15, 2024
CVE-2024-21413	Improper Input Validation RCE in Microsoft Outlook (MonikerLink)	9.8	95%	KEVPoC	Feb 13, 2024 KEV Feb 6, 2025

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Feb 15, 2024 Threat Intelligence / Vulnerability Microsoft on Wednesday acknowledged that a newly disclosed critical security flaw in Exchange Server has been actively exploited in the wild, a day after it released fixes for the vulnerability as part of its Patch Tuesday updates . Tracked as CVE-2024-21410 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.