CVE-2021-34523CISA KEV
Microsoft Exchange Server Privilege Escalation Vulnerability
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
CISA catalog record
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
- Product
- Exchange Server
- Added to KEV
- 3 Nov 2021
- Federal remediation due
- 17 Nov 2021
- Known ransomware use
- Yes