CVE-2021-34523

CriticalCVSS 9.0/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Microsoft Exchange Server Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 9.0/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 14, 2021
Last modified
Aug 10, 2026
Added to CISA KEV
Nov 3, 2021
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-345248.1Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCVE-2021-345258.8Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-345278.8A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacCVE-2021-345287.8Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-345297.8Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-34534.6Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker wiCVE-2021-345307.8Windows Graphics Component Remote Code Execution VulnerabilityCVE-2021-345325.5ASP.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2021-345337.8Windows Graphics Component Font Parsing Remote Code Execution VulnerabilityCVE-2021-345346.8Windows MSHTML Platform Remote Code Execution VulnerabilityCVE-2021-345358.8Remote Desktop Client Remote Code Execution VulnerabilityCVE-2021-345367.8Windows Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-34523: Critical severity, CVSS 9.0 | Vulnix