CVE-2024-21410

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Microsoft Exchange Server Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Feb 13, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Feb 15, 2024
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-214118.8Skype for Consumer Remote Code Execution VulnerabilityCVE-2024-214128.1Internet Shortcut Files Security Feature Bypass VulnerabilityCVE-2024-214139.8Microsoft Outlook Remote Code Execution VulnerabilityCVE-2024-214148.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-214158.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-214169.8Windows TCP/IP Remote Code Execution VulnerabilityCVE-2024-214178.8Windows Text Services Framework Elevation of Privilege VulnerabilityCVE-2024-214187.8Software for Open Networking in the Cloud (SONiC) Elevation of Privilege VulnerabilityCVE-2024-214195.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2024-21425.4The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Info Table widget inCVE-2024-214208.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2024-214217.5Azure SDK Spoofing Vulnerability
CVE-2024-21410: Critical severity, CVSS 9.8 | Vulnix