CVE CVE-2023-21529

CVE-2023-21529 — Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

CISA KEV · Apr 13, 2026 · CRITICAL cve actively-exploited kev
Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVSS Score
N/A
CRITICAL
Vendor
Microsoft
Product
Exchange Server

Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

This article is sourced from CISA KEV. Read the full story at the original source below.

cve actively-exploited kev
Original Source
CISA KEV
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Read Full Story ↗