THREAT OPS › CVEs › CVE-2023-21529
CVE-2023-21529 — Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.
Vulnerability details
- Affected productsExchange Server
- KEV remediation due2026-04-27
Related reporting
- April 2026 CVE Landscaperecordedfuture