CVE-2023-21529

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Aug 19, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
Feb 14, 2023
Last modified
Aug 19, 2026
Added to CISA KEV
Apr 13, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-21536.1A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unCVE-2023-215317.0Azure Service Fabric Container Elevation of Privilege VulnerabilityCVE-2023-215327.0Windows GDI Elevation of Privilege VulnerabilityCVE-2023-215358.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2023-215364.7Event Tracing for Windows Information Disclosure VulnerabilityCVE-2023-215377.8Microsoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityCVE-2023-215387.5.NET Denial of Service VulnerabilityCVE-2023-215397.5Windows Authentication Remote Code Execution VulnerabilityCVE-2023-21547.2A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of thCVE-2023-215405.5Windows Cryptographic Information Disclosure VulnerabilityCVE-2023-215417.8Windows Task Scheduler Elevation of Privilege VulnerabilityCVE-2023-215427.0Windows Installer Elevation of Privilege Vulnerability
CVE-2023-21529: High severity, CVSS 8.8 | Vulnix