CVE-2023-32031

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

VendorProductVersions
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 12>= 15.02.0, < 15.02.1118.030
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23>= 15.01.0, < 15.01.2507.027
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 13>= 15.02.0, < 15.02.1258.016

References

Timeline

Published
Jun 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-320326.5.NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2023-320337.2Microsoft Failover Cluster Remote Code Execution VulnerabilityCVE-2023-320347.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-320357.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-320376.5Windows Layer-2 Bridge Network Driver Information Disclosure VulnerabilityCVE-2023-320388.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2023-320395.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-32046.5The Materialis theme for WordPress is vulnerable to limited arbitrary options updates in versions up to, and including, 1.1.24. This is due CVE-2023-320405.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-320415.5Windows Update Orchestrator Service Information Disclosure VulnerabilityCVE-2023-320427.5OLE Automation Information Disclosure VulnerabilityCVE-2023-320436.8Windows Remote Desktop Security Feature Bypass Vulnerability
CVE-2023-32031: High severity, CVSS 8.8 | Vulnix