CISA KEV

CVE-2024-21410

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

VendorMicrosoft

ProductExchange Server

EPSS12.7%

Added to KEVFeb 15, 2024

Remediation DueMar 07, 2024

Known Ransomware UseUnknown

CWECWE-287

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

From Disclosure to Action

Know how quickly you need to move.

For CVE-2024-21410, added to the catalogue on Feb 15, 2024 with a remediation deadline of Mar 07, 2024.

Added to KEVFeb 15, 2024

Seraph AlertSame day

Remediation DueMar 07, 2024

ValidationOngoing

Overdue965 days overdue

Recommended action: Apply vendor remediation guidance.

Available for technologies you monitor inside Seraph CTI.

Surfaced automatically when a tracked actor is linked to this CVE.

Shown when this vendor/product is relevant to your industry.

Campaign and indicator context, where Seraph analysts have published it.

Declare your technology stack inside Seraph CTI and get notified the moment a KEV entry matches it.