Home / Vulnerabilities / CVE-2024-21410
CRITICAL SEVERITY
CVE-2024-21410Microsoft · Exchange Server

Microsoft Exchange Server Privilege Escalation Vulnerability

Technical Severity

CVSS v3.1 Metrics

CRITICAL
9.8 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Exploitation Likelihood

EPSS Prediction

6.14 %
Predictive Probability
Percentile Rank
90.8 th

Documented as more likely to be exploited than 90.8% of known CVEs.

Detection Date

Feb 15, 2024

Remediation Due

Mar 07, 2024

CISA Catalog Active

Threat Analysis

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

Remediation Directive

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

External Intelligence

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2024-21410