ME
Product
Microsoft Exchange Server 2019 Cumulative Update 12
On CISA KEVExploited in the wildRansomware-linked
10
CVEs
4
On KEV
8.8
Max CVSS
0
New 30D
VulnerabilityHigh
[CISA KEV] CVE-2023-21529: Microsoft Exchange Server - Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.
ESExchange ServerCVE-2023-21529
Apr 13, 2026·CISA KEV