Multiple vulnerabilities in Microsoft Server Software

Description

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
3. An information disclosure vulnerability in Microsoft Exchange Server can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2023-21762

• CVE-2023-21763
• CVE-2023-21761
• CVE-2023-21764
• CVE-2023-21745

Related products

• Microsoft-Exchange-Server

CVE list

• CVE-2023-21762
  critical
• CVE-2023-21763
  critical
• CVE-2023-21761
  critical
• CVE-2023-21764
  critical
• CVE-2023-21745
  critical

KB list

• 5022188
• 5022143
• 5022193

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com