Home / Vulnerabilities / CVE-2024-21410
CRITICAL SEVERITY
CVE-2024-21410 Microsoft · Exchange Server

Microsoft Exchange Server Privilege Escalation Vulnerability

Technical Severity

CVSS v3.1 Metrics

CRITICAL
9.8 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Exploitation Likelihood

EPSS Prediction

3.54 %
Predictive Probability
Percentile Rank
87.4 th

Documented as more likely to be exploited than 87.4% of known CVEs.

Detection Date

Feb 15, 2024

Remediation Due

Mar 07, 2024

CISA Catalog Active

Threat Analysis

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

Remediation Directive

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

External Intelligence

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410
NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2024-21410