CRITICAL 9.8 Microsoft PoC

CVE-2024-21410

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Security Update 2024-Feb: Microsoft Exchange Server Elevation of Privilege Vulnerability

Affected Products

Microsoft Exchange Server 2016 Cumulative Update 23
Microsoft Exchange Server 2019 Cumulative Update 13
Microsoft Exchange Server 2019 Cumulative Update 14

References

Published: 2024-02-13 · Source: Microsoft · Feed updated: 2026-09-24

This critical severity vulnerability with a CVSS score of 9.8 was published on 2024-02-13 via Microsoft. 🚨 A public proof-of-concept exploit is available on GitHub. EPSS score: 12.6% (top 4% of all CVEs by exploitation probability). Affected: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 13, Microsoft Exchange Server 2019 Cumulative Update 14.

Risk Timeline

CVE Disclosed2024-02-13 · 954 days ago

Public PoC Exploit AvailableWeaponised proof-of-concept code is publicly accessible

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2024-21410

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2026-63508	Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability	CRITICAL	10.0
CVE-2026-65667	Microsoft Teams Elevation of Privilege Vulnerability	CRITICAL	10.0
CVE-2026-65801	Microsoft Exchange Online Elevation of Privilege Vulnerability	CRITICAL	10.0
CVE-2026-69836	Microsoft Entra ID Remote Code Execution Vulnerability	CRITICAL	10.0
CVE-2026-83711	Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability	CRITICAL	10.0
CVE-2026-23652	Microsoft Power Pages Remote Code Execution Vulnerability	CRITICAL	10.0

vulnfeed aggregates 11976 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.